Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.4

Intel VROC Software Privilege Escalation Risk on Windows

CVE-2024-23489 · published 2 years ago
Summary

Some older versions of Intel VROC software on Windows may allow a logged-in user to gain higher system permissions. This could happen if an attacker exploits this weakness. To stay protected, update Intel VROC to the latest version, especially if you're running it on a Windows system.

What to do
  • Update intel virtual_raid_on_cpu to version 8.6.0.1191 or later.
Affected software
VendorProductAffected versions
intel virtual_raid_on_cpu < 8.6.0.1191
cpe:2.3:a:intel:virtual_raid_on_cpu:*:*:*:*:*:*:*:*
Original advisory text
Uncontrolled search path for some Intel(R) VROC software before version 8.6.0.1191 may allow an authenticated user to potentially enable escalation of privilege via local access.
Uncontrolled search path for some Intel(R) VROC software before version 8.6.0.1191 may allow an authenticated user to potentially enable escalation of privilege via local access.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
5.4 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-427Uncontrolled Search Path Element
Timeline
Published14 Aug 2024
Updated26 Oct 2026
First seen7 Mar 2026
Sources
CVE-2024-23489 · NVD
Track software like this
Free during beta