VulnerabilityModified

CVE-2023-42776

Improper input validation in some Intel(R) SGX DCAP software for Windows before version 1.19.100.3 may allow an authenticateed user to potentially enable information disclosure via local access.

MEDIUM 5.5EPSS 0.22%

Does this matter?

Lower severity and a low EPSS score (0.22%). Track it; it rarely justifies an emergency change on its own.

Description

Improper input validation in some Intel(R) SGX DCAP software for Windows before version 1.19.100.3 may allow an authenticateed user to potentially enable information disclosure via local access.

CVSS 3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.22% probability · 12th percentile
CISA KEV: Not listed
Weakness: CWE-20
Affected: intel/sgx dcap
Source: secure@intel.com

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01014.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01014.htmlVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.