CVE-2023-49615
Published: 12 February 2025
Summary
CVE-2023-49615 is a high-severity Improper Input Validation (CWE-20) vulnerability in Intel (inferred from references). Its CVSS base score is 8.7 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 20.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2023-49615 is an improper input validation vulnerability (CWE-20) affecting some Intel System Security Report and System Resources Defense firmware. Published on 2025-02-12, it has a CVSS v3.1 base score of 7.5 (AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H). The flaw allows potential escalation of privilege when exploited via local access.
A privileged user with local access can exploit this vulnerability, though it requires high attack complexity and no user interaction. Successful exploitation may enable escalation of privilege, resulting in high confidentiality, integrity, and availability impacts due to the changed scope.
Intel has issued security advisory INTEL-SA-01203, available at https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01203.html, which provides details on the vulnerability.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-53560
Vulnerability details
Improper input validation in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable escalation of privilege via local access.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Direct local exploitation of firmware input validation flaw enables privilege escalation (T1068).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
SI-10 directly requires validation of information inputs, addressing the core improper input validation flaw (CWE-20) in the Intel firmware that enables privilege escalation.
SI-2 mandates timely flaw remediation including vulnerability scanning and patching, directly mitigating this specific firmware vulnerability via Intel's advisory INTEL-SA-01203.
AC-6 enforces least privilege, limiting the number of high-privileged users (PR:H) who could attempt local exploitation of the firmware vulnerability.