{"id":"CVE-2023-34427","state":"PUBLISHED","title":"Protection mechanism failure in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potentially enable es","description":"Protection mechanism failure in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access.","publishedAt":"2023-08-11T02:37:24.682Z","updatedAt":"2024-10-04T13:05:09.647Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","source":"intel"},"assigner":"intel","products":["n/a Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA"],"affected":[{"vendor":"n/a","product":"Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA","defaultStatus":"unaffected","versions":[{"version":"version 0.25.0","status":"affected"}]}],"references":["http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00912.html"],"weaknesses":["CWE-693"],"ingestedAt":"2026-10-29T20:06:00.499Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/34xxx/CVE-2023-34427.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-34427","state":"PUBLISHED","datePublished":"2023-08-11T02:37:24.682Z","dateUpdated":"2024-10-04T13:05:09.647Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2023-06-06T03:00:05.035Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Protection mechanism failure in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access."}],"affected":[{"vendor":"n/a","product":"Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA","defaultStatus":"unaffected","versions":[{"version":"version 0.25.0","status":"affected"}]}],"references":[{"url":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00912.html","name":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00912.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"escalation of privilege"},{"cweId":"CWE-693","lang":"en","description":"Protection mechanism failure","type":"CWE"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2023-08-11T02:37:24.682Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00912.html","name":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00912.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T16:10:06.963Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-04T13:04:02.671302Z","id":"CVE-2023-34427","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-04T13:05:09.647Z"}}]}}}