6.7
Medium
CVE-2023-28389 Incorrect default permissions in some Intel(R) CSME installer software before version 2328.5.5.0 may allow an…
Description
Incorrect default permissions in some Intel(R) CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Intel(R) CSME installer software | Versions not published | |
| converged_security_and_manageability_engine 2328.5 | earliest → < 2328.5.5.0 | 2328.5.5.0 |