CVE-2023-48267
Published: 12 February 2025
Summary
CVE-2023-48267 is a high-severity Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) vulnerability in Intel (inferred from references). Its CVSS base score is 8.6 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 19.9th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-2 (Flaw Remediation) and SI-10 (Information Input Validation).
Deeper analysis
CVE-2023-48267 involves improper buffer restrictions (CWE-119) in some Intel(R) System Security Report and System Resources Defense firmware. Published on 2025-02-12, this vulnerability carries a CVSS v3.1 base score of 7.9 (AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N), indicating high severity due to its potential for significant confidentiality and integrity impacts.
A privileged user (PR:H) with local access (AV:L) can exploit the vulnerability with low complexity (AC:L) and no user interaction (UI:N). Successful exploitation may enable escalation of privilege, leveraging the changed scope (S:C) to achieve high confidentiality (C:H) and integrity (I:H) impacts without affecting availability (A:N).
Intel Security Advisory INTEL-SA-01203 and Dell Security Advisory DSA-2025-002 provide details on the issue, including mitigation guidance such as firmware updates for affected systems.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-52336
Vulnerability details
Improper buffer restrictions in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable escalation of privilege via local access.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Local firmware buffer restriction flaw enables privilege escalation (T1068) and direct system firmware compromise/persistence (T1542.001).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Requires timely identification, reporting, and correction of the firmware flaw via patches as specified in Intel and Dell advisories, directly eliminating the buffer restriction vulnerability.
Implements memory protections such as address space layout randomization or data execution prevention that mitigate exploitation of improper buffer restrictions leading to privilege escalation.
Enforces validation of inputs to the firmware to prevent buffer overflows from exceeding allocated space, addressing the core CWE-119 issue.