CVE-2023-36860 HIGH

CVE-2023-36860

Vendor N/A

Product Intel Unison software

Weakness CWE-20 · Input validation

Published November 14, 2023

Last update August 30, 2024

View on NVD All CVEs

CVSS base score

7.6/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality Low

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

What the vulnerability does

01Description

Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access.

Key dates

02Disclosure timeline

November 14, 2023 CVE published

August 30, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-36860 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/20.html

Related vulnerabilities

04Related CVE

CVE-2026-34197 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans CVE-2023-37549 CODESYS: Improper Input Validation in CmpApp component CVE-2022-26107 CVE-2024-23790 Missing file type check in avatar picture upload CVE-2024-20733 [ZS-VR-23-360] Adobe Acrobat Reader Parsing OTF font Denial-of-Service Vulnerability