{"id":"CVE-2023-31203","state":"PUBLISHED","title":"Improper input validation in some OpenVINO Model Server software before version 2022.3 for Intel Distribution of OpenVINO toolkit may allow an unauthenticated user to potentially e","description":"Improper input validation in some OpenVINO Model Server software before version 2022.3 for Intel Distribution of OpenVINO toolkit may allow an unauthenticated user to potentially enable denial of service via network access.","publishedAt":"2023-11-14T19:04:59.771Z","updatedAt":"2024-08-14T20:08:49.658Z","severity":{"score":4.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","source":"intel"},"assigner":"intel","products":["n/a OpenVINO Model Server software"],"affected":[{"vendor":"n/a","product":"OpenVINO Model Server software","defaultStatus":"unaffected","versions":[{"version":"before version 2022.3 for Intel Distribution of OpenVINO toolkit","status":"affected"}]}],"references":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00901.html"],"weaknesses":["CWE-20"],"ingestedAt":"2026-10-29T20:06:00.499Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/31xxx/CVE-2023-31203.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-31203","state":"PUBLISHED","datePublished":"2023-11-14T19:04:59.771Z","dateUpdated":"2024-08-14T20:08:49.658Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2023-05-05T03:00:03.521Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Improper input validation in some OpenVINO Model Server software before version 2022.3 for Intel Distribution of OpenVINO toolkit may allow an unauthenticated user to potentially enable denial of service via network access."}],"affected":[{"vendor":"n/a","product":"OpenVINO Model Server software","defaultStatus":"unaffected","versions":[{"version":"before version 2022.3 for Intel Distribution of OpenVINO toolkit","status":"affected"}]}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00901.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00901.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":4.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"denial of service"},{"cweId":"CWE-20","lang":"en","description":"Improper input validation","type":"CWE"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2023-11-14T19:04:59.771Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00901.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00901.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T14:45:26.097Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-08-14T19:05:43.060094Z","id":"CVE-2023-31203","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-14T20:08:49.658Z"}}]}}}