CVE-2023-42776

LOW

Intel SGX DCAP < 1.19.100.3 - Authenticated Information Disclosure via Local Access

Title source: llm
STIX 2.1

Description

Improper input validation in some Intel(R) SGX DCAP software for Windows before version 1.19.100.3 may allow an authenticateed user to potentially enable information disclosure via local access.

References (1)

Core 1

Scores

CVSS v3 3.8
EPSS 0.0010
EPSS Percentile 27.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-20
Status published
Products (1)
intel/sgx_dcap < 1.19.100.3
Published Feb 14, 2024
Tracked Since Feb 18, 2026