{"id":"CVE-2023-32656","state":"PUBLISHED","title":"Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potentially enable es","description":"Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access.","publishedAt":"2023-08-11T02:37:24.133Z","updatedAt":"2024-10-04T13:05:24.192Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","source":"intel"},"assigner":"intel","products":["n/a Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA"],"affected":[{"vendor":"n/a","product":"Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA","defaultStatus":"unaffected","versions":[{"version":"version 0.25.0","status":"affected"}]}],"references":["http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00912.html"],"weaknesses":["CWE-92"],"ingestedAt":"2026-10-29T20:06:00.499Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/32xxx/CVE-2023-32656.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-32656","state":"PUBLISHED","datePublished":"2023-08-11T02:37:24.133Z","dateUpdated":"2024-10-04T13:05:24.192Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2023-05-23T03:00:05.459Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access."}],"affected":[{"vendor":"n/a","product":"Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA","defaultStatus":"unaffected","versions":[{"version":"version 0.25.0","status":"affected"}]}],"references":[{"url":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00912.html","name":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00912.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"escalation of privilege"},{"cweId":"CWE-92","lang":"en","description":"Improper buffer restrictions","type":"CWE"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2023-08-11T02:37:24.133Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00912.html","name":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00912.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T15:25:36.242Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-04T13:04:06.427689Z","id":"CVE-2023-32656","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-04T13:05:24.192Z"}}]}}}