CVE-2023-45736

Insecure inherited permissions in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS v3 6.7 MEDIUM

6.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html	Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:intel:power_gadget:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2024-05-16 21:15

Updated : 2025-08-28 01:39

NVD link : CVE-2023-45736

Mitre link : CVE-2023-45736

CVE.ORG link : CVE-2023-45736

JSON object : View

Products Affected

microsoft

windows

intel

power_gadget

CWE

CWE-277

Insecure Inherited Permissions

{"id": "CVE-2023-45736", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2024-05-16T21:15:58.057", "references": [{"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-277"}]}], "descriptions": [{"lang": "en", "value": "Insecure inherited permissions in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access."}, {"lang": "es", "value": " Los permisos heredados inseguros en el software Intel(R) Power Gadget para Windows en todas sus versiones pueden permitir que un usuario autenticado potencialmente habilite la escalada de privilegios a trav\u00e9s del acceso local."}], "lastModified": "2025-08-28T01:39:07.567", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:intel:power_gadget:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "36966A0E-D650-4A26-B57A-8AAA3284E5CF", "versionEndExcluding": "3.6.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "[email protected]"}