Cyber Resilience

CVE-2023-24589

Intel Thunderbolt Dch Driver ≤ 88

Published
14 February 2024
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 6.1
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L
EPSS Score 0.0017 7th percentile
Risk Priority 40 floored blend · peak EPSS

Summary

CVE-2023-24589 is a medium-severity DEPRECATED: Improper Sanitization of Custom Special Characters (CWE-92) vulnerability in Intel Thunderbolt Dch Driver. Its CVSS base score is 6.1 (Medium).

Operationally, ranked at the 7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow a privileged user to potentially enable escalation of privilege via local access.

CWE(s)
CWE-92NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-27300Same product: Intel Thunderbolt Dch Driver
CVE-2023-27308Same product: Intel Thunderbolt Dch Driver
CVE-2023-22390Same product: Intel Thunderbolt Dch Driver
CVE-2023-27307Same product: Intel Thunderbolt Dch Driver
CVE-2023-24463Same product: Intel Thunderbolt Dch Driver
CVE-2023-26592Same product: Intel Thunderbolt Dch Driver
CVE-2023-25777Same product: Intel Thunderbolt Dch Driver
CVE-2023-27303Same product: Intel Thunderbolt Dch Driver
CVE-2023-22848Same product: Intel Thunderbolt Dch Driver
CVE-2023-24481Same product: Intel Thunderbolt Dch Driver

Affected Assets

intel
thunderbolt dch driver
≤ 88

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References