CVE-2023-27301

Vulnerability

Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access [1]. The affected versions are those prior to driver version 88 [1].

Exploitation

The attacker must have valid local access to the system and be authenticated [1]. No additional user interaction or special configuration is required beyond local access [1]. The vulnerability can be exploited by an authenticated user with local access to the system [1].

Impact

Successful exploitation could allow an authenticated user to escalate privileges on the affected system [1]. This could lead to gaining higher-level access than intended, potentially compromising the confidentiality, integrity, or availability of the system [1].

Mitigation

Intel recommends updating the Intel Thunderbolt DCH drivers to version 88 or later to address this issue [1]. Workarounds are not mentioned in the available references [1]. The update should be applied through standard driver update channels [1].