CVE-2023-24481

Vulnerability

Improper access control vulnerability exists in Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 [1]. The flaw resides in the driver's handling of certain operations, allowing an authenticated user to bypass intended access restrictions.

Exploitation

An attacker must have local access to the system and be authenticated as a user. The exploitation requires no additional privileges beyond standard user access. By leveraging the improper access control, the attacker can perform actions that should be restricted, leading to privilege escalation.

Impact

Successful exploitation allows an authenticated local attacker to escalate their privileges, potentially gaining higher-level access such as administrative rights. This could lead to full compromise of the affected system.

Mitigation

Intel has released driver version 88 to address this vulnerability [1]. Users should update to the latest version of the Intel Thunderbolt DCH driver from Intel's support website. No workarounds are mentioned in the advisory.