ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-2007

—
CVSS 3.1
7.8 high
EPSS
<1%p21
Published
()
Modified
Description

The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.

Vendors
linuxdebiannetapp
Products
linux kernel, debian linux, h300s firmware, h500s firmware, h700s firmware, h410s firmware, h410c firmware, solidfire \& hci management node
Weakness
CWE-367, CWE-667
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

No ingested article mentions this CVE yet.