CVE-2023-32666highCWE-1191

CVE-2023-32666: high-severity vulnerability in 4th Generation Intel(R) Xeon(R) Processors…

Published · Updated

Follow this CVE+ Monitor 4th Generation Intel Xeon Processors when using Intel SGX or Intel TDX

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.2epss 0.2%
In short

Intel's 4th generation Xeon processors have a security flaw in their debug interface that allows a privileged user on the system to gain even higher privileges. This matters because it can give attackers full control of sensitive security features like SGX and TDX.

Technical detail

The on-chip debug and test interface lacks proper access control in 4th Gen Intel Xeon processors when SGX or TDX is enabled, allowing a privileged local user to escalate privileges. Attack vector is local; requires existing elevated privileges. Impact is privilege escalation potentially compromising hardware-based security boundaries.

Summary generated and translated by AI from the official description.
On-chip debug and test interface with improper access control in some 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Affected products
n/a · 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX