Attacker Value

Unknown

CVE-2023-22329

CVE ID

AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:

CVE ID:

Add References:

Advisory

Description: URL:

Add Another

Exploit

Description: URL:

Add Another

Mitigation

Description: URL:

Add Another

Government or Industry Alert

Description: URL:

Add Another

Miscellaneous

Description: URL:

Add Another

Attacker Value

Unknown

(0 users assessed)

Exploitability

Unknown

(0 users assessed)

User Interaction

None

Privileges Required

Low

Attack Vector

Adjacent_network

CVE-2023-22329

Disclosure Date: November 14, 2023 •

(Last updated November 29, 2023) ▾

CVE-2023-22329 CVSS v3 Base Score: 3.5

MITRE ATT&CK Log in to add MITRE ATT&CK tag

Add MITRE ATT&CK tactics and techniques that apply to this CVE.

MITRE ATT&CK

Select the MITRE ATT&CK Tactics that apply to this CVE

Collection

Select any Techniques used:

Data from Local System

Data from Removable Media

Data from Network Shared Drive

Input Capture

Input Capture: Keylogging

Input Capture: GUI Input Capture

Input Capture: Web Portal Capture

Input Capture: Credential API Hooking

Data Staged

Data Staged: Local Data Staging

Data Staged: Remote Data Staging

Screen Capture

Email Collection

Email Collection: Local Email Collection

Email Collection: Remote Email Collection

Email Collection: Email Forwarding Rule

Clipboard Data

Automated Collection

Audio Capture

Video Capture

Man in the Browser

Data from Information Repositories

Data from Information Repositories: Confluence

Data from Information Repositories: Sharepoint

Data from Cloud Storage Object

Man-in-the-Middle

Man-in-the-Middle: LLMNR/NBT-NS Poisoning and SMB Relay

Archive Collected Data

Archive Collected Data: Archive via Utility

Archive Collected Data: Archive via Library

Archive Collected Data: Archive via Custom Method

Command and Control

Select any Techniques used:

Data Obfuscation

Data Obfuscation: Junk Data

Data Obfuscation: Steganography

Data Obfuscation: Protocol Impersonation

Fallback Channels

Application Layer Protocol

Application Layer Protocol: Web Protocols

Application Layer Protocol: File Transfer Protocols

Application Layer Protocol: Mail Protocols

Application Layer Protocol: DNS

Proxy

Proxy: Internal Proxy

Proxy: External Proxy

Proxy: Multi-hop Proxy

Proxy: Domain Fronting

Communication Through Removable Media

Non-Application Layer Protocol

Web Service

Web Service: Dead Drop Resolver

Web Service: Bidirectional Communication

Web Service: One-Way Communication

Multi-Stage Channels

Ingress Tool Transfer

Data Encoding

Data Encoding: Standard Encoding

Data Encoding: Non-Standard Encoding

Traffic Signaling

Traffic Signaling: Port Knocking

Remote Access Software

Dynamic Resolution

Dynamic Resolution: Fast Flux DNS

Dynamic Resolution: Domain Generation Algorithms

Dynamic Resolution: DNS Calculation

Non-Standard Port

Protocol Tunneling

Encrypted Channel

Encrypted Channel: Symmetric Cryptography

Encrypted Channel: Asymmetric Cryptography

Credential Access

Select any Techniques used:

OS Credential Dumping

OS Credential Dumping: LSASS Memory

OS Credential Dumping: Security Account Manager

OS Credential Dumping: NTDS

OS Credential Dumping: LSA Secrets

OS Credential Dumping: Cached Domain Credentials

OS Credential Dumping: DCSync

OS Credential Dumping: Proc Filesystem

OS Credential Dumping: /etc/passwd and /etc/shadow

Network Sniffing

Input Capture

Input Capture: Keylogging

Input Capture: GUI Input Capture

Input Capture: Web Portal Capture

Input Capture: Credential API Hooking

Brute Force

Brute Force: Password Guessing

Brute Force: Password Cracking

Brute Force: Password Spraying

Brute Force: Credential Stuffing

Two-Factor Authentication Interception

Forced Authentication

Exploitation for Credential Access

Steal Application Access Token

Steal Web Session Cookie

Unsecured Credentials

Unsecured Credentials: Credentials In Files

Unsecured Credentials: Credentials in Registry

Unsecured Credentials: Bash History

Unsecured Credentials: Private Keys

Unsecured Credentials: Cloud Instance Metadata API

Unsecured Credentials: Group Policy Preferences

Credentials from Password Stores

Credentials from Password Stores: Keychain

Credentials from Password Stores: Securityd Memory

Credentials from Password Stores: Credentials from Web Browsers

Modify Authentication Process

Modify Authentication Process: Domain Controller Authentication

Modify Authentication Process: Password Filter DLL

Modify Authentication Process: Pluggable Authentication Modules

Man-in-the-Middle

Man-in-the-Middle: LLMNR/NBT-NS Poisoning and SMB Relay

Steal or Forge Kerberos Tickets

Steal or Forge Kerberos Tickets: Golden Ticket

Steal or Forge Kerberos Tickets: Silver Ticket

Steal or Forge Kerberos Tickets: Kerberoasting

Defense Evasion

Select any Techniques used:

Direct Volume Access

Rootkit

Obfuscated Files or Information

Obfuscated Files or Information: Binary Padding

Obfuscated Files or Information: Software Packing

Obfuscated Files or Information: Steganography

Obfuscated Files or Information: Compile After Delivery

Obfuscated Files or Information: Indicator Removal from Tools

Masquerading

Masquerading: Invalid Code Signature

Masquerading: Right-to-Left Override

Masquerading: Rename System Utilities

Masquerading: Masquerade Task or Service

Masquerading: Match Legitimate Name or Location

Masquerading: Space after Filename

Process Injection

Process Injection: Dynamic-link Library Injection

Process Injection: Portable Executable Injection

Process Injection: Thread Execution Hijacking

Process Injection: Asynchronous Procedure Call

Process Injection: Thread Local Storage

Process Injection: Ptrace System Calls

Process Injection: Proc Memory

Process Injection: Extra Window Memory Injection

Process Injection: Process Hollowing

Process Injection: Process Doppelgänging

Process Injection: VDSO Hijacking

Indicator Removal on Host

Indicator Removal on Host: Clear Windows Event Logs

Indicator Removal on Host: Clear Linux or Mac System Logs

Indicator Removal on Host: Clear Command History

Indicator Removal on Host: File Deletion

Indicator Removal on Host: Network Share Connection Removal

Indicator Removal on Host: Timestomp

Valid Accounts

Valid Accounts: Default Accounts

Valid Accounts: Domain Accounts

Valid Accounts: Local Accounts

Valid Accounts: Cloud Accounts

Modify Registry

Trusted Developer Utilities Proxy Execution

Trusted Developer Utilities Proxy Execution: MSBuild

Access Token Manipulation

Access Token Manipulation: Token Impersonation/Theft

Access Token Manipulation: Create Process with Token

Access Token Manipulation: Make and Impersonate Token

Access Token Manipulation: Parent PID Spoofing

Access Token Manipulation: SID-History Injection

Deobfuscate/Decode Files or Information

BITS Jobs

Indirect Command Execution

Traffic Signaling

Traffic Signaling: Port Knocking

Rogue Domain Controller

Exploitation for Defense Evasion

Signed Script Proxy Execution

Signed Script Proxy Execution: PubPrn

Signed Binary Proxy Execution

Signed Binary Proxy Execution: Compiled HTML File

Signed Binary Proxy Execution: Control Panel

Signed Binary Proxy Execution: CMSTP

Signed Binary Proxy Execution: InstallUtil

Signed Binary Proxy Execution: Mshta

Signed Binary Proxy Execution: Msiexec

Signed Binary Proxy Execution: Odbcconf

Signed Binary Proxy Execution: Regsvcs/Regasm

Signed Binary Proxy Execution: Regsvr32

Signed Binary Proxy Execution: Rundll32

XSL Script Processing

Template Injection

File and Directory Permissions Modification

File and Directory Permissions Modification: Windows File and Directory Permissions Modification

File and Directory Permissions Modification: Linux and Mac File and Directory Permissions Modification

Execution Guardrails

Execution Guardrails: Environmental Keying

Group Policy Modification

Virtualization/Sandbox Evasion

Virtualization/Sandbox Evasion: System Checks

Virtualization/Sandbox Evasion: User Activity Based Checks

Virtualization/Sandbox Evasion: Time Based Evasion

Unused/Unsupported Cloud Regions

Pre-OS Boot

Pre-OS Boot: System Firmware

Pre-OS Boot: Component Firmware

Pre-OS Boot: Bootkit

Abuse Elevation Control Mechanism

Abuse Elevation Control Mechanism: Setuid and Setgid

Abuse Elevation Control Mechanism: Bypass User Access Control

Abuse Elevation Control Mechanism: Sudo and Sudo Caching

Abuse Elevation Control Mechanism: Elevated Execution with Prompt

Use Alternate Authentication Material

Use Alternate Authentication Material: Application Access Token

Use Alternate Authentication Material: Pass the Hash

Use Alternate Authentication Material: Pass the Ticket

Use Alternate Authentication Material: Web Session Cookie

Subvert Trust Controls

Subvert Trust Controls: Gatekeeper Bypass

Subvert Trust Controls: Code Signing

Subvert Trust Controls: SIP and Trust Provider Hijacking

Subvert Trust Controls: Install Root Certificate

Modify Authentication Process

Modify Authentication Process: Domain Controller Authentication

Modify Authentication Process: Password Filter DLL

Modify Authentication Process: Pluggable Authentication Modules

Impair Defenses

Impair Defenses: Disable or Modify Tools

Impair Defenses: Disable Windows Event Logging

Impair Defenses: HISTCONTROL

Impair Defenses: Disable or Modify System Firewall

Impair Defenses: Indicator Blocking

Impair Defenses: Disable or Modify Cloud Firewall

Hide Artifacts

Hide Artifacts: Hidden Files and Directories

Hide Artifacts: Hidden Users

Hide Artifacts: Hidden Window

Hide Artifacts: NTFS File Attributes

Hide Artifacts: Hidden File System

Hide Artifacts: Run Virtual Instance

Hijack Execution Flow

Hijack Execution Flow: DLL Search Order Hijacking

Hijack Execution Flow: DLL Side-Loading

Hijack Execution Flow: Dylib Hijacking

Hijack Execution Flow: Executable Installer File Permissions Weakness

Hijack Execution Flow: LD_PRELOAD

Hijack Execution Flow: Path Interception by PATH Environment Variable

Hijack Execution Flow: Path Interception by Search Order Hijacking

Hijack Execution Flow: Path Interception by Unquoted Path

Hijack Execution Flow: Services File Permissions Weakness

Hijack Execution Flow: Services Registry Permissions Weakness

Hijack Execution Flow: COR_PROFILER

Modify Cloud Compute Infrastructure

Modify Cloud Compute Infrastructure: Create Snapshot

Modify Cloud Compute Infrastructure: Create Cloud Instance

Modify Cloud Compute Infrastructure: Delete Cloud Instance

Modify Cloud Compute Infrastructure: Revert Cloud Instance

Discovery

Select any Techniques used:

System Service Discovery

Application Window Discovery

Query Registry

System Network Configuration Discovery

Remote System Discovery

System Owner/User Discovery

Network Sniffing

Network Service Scanning

System Network Connections Discovery

Process Discovery

Permission Groups Discovery

Permission Groups Discovery: Local Groups

Permission Groups Discovery: Domain Groups

Permission Groups Discovery: Cloud Groups

System Information Discovery

File and Directory Discovery

Account Discovery

Account Discovery: Local Account

Account Discovery: Domain Account

Account Discovery: Email Account

Account Discovery: Cloud Account

Peripheral Device Discovery

System Time Discovery

Network Share Discovery

Password Policy Discovery

Browser Bookmark Discovery

Domain Trust Discovery

Virtualization/Sandbox Evasion

Virtualization/Sandbox Evasion: System Checks

Virtualization/Sandbox Evasion: User Activity Based Checks

Virtualization/Sandbox Evasion: Time Based Evasion

Software Discovery

Software Discovery: Security Software Discovery

Cloud Service Discovery

Cloud Service Dashboard

Execution

Select any Techniques used:

Windows Management Instrumentation

Scheduled Task/Job

Scheduled Task/Job: At (Linux)

Scheduled Task/Job: At (Windows)

Scheduled Task/Job: Cron

Scheduled Task/Job: Launchd

Scheduled Task/Job: Scheduled Task

Command and Scripting Interpreter

Command and Scripting Interpreter: PowerShell

Command and Scripting Interpreter: AppleScript

Command and Scripting Interpreter: Windows Command Shell

Command and Scripting Interpreter: Unix Shell

Command and Scripting Interpreter: Visual Basic

Command and Scripting Interpreter: Python

Command and Scripting Interpreter: JavaScript/JScript

Software Deployment Tools

Native API

Shared Modules

Exploitation for Client Execution

User Execution

User Execution: Malicious Link

User Execution: Malicious File

Inter-Process Communication

Inter-Process Communication: Component Object Model

Inter-Process Communication: Dynamic Data Exchange

System Services

System Services: Launchctl

System Services: Service Execution

Exfiltration

Select any Techniques used:

Exfiltration Over Other Network Medium

Exfiltration Over Other Network Medium: Exfiltration Over Bluetooth

Automated Exfiltration

Scheduled Transfer

Data Transfer Size Limits

Exfiltration Over C2 Channel

Exfiltration Over Alternative Protocol

Exfiltration Over Alternative Protocol: Exfiltration Over Symmetric Encrypted Non-C2 Protocol

Exfiltration Over Alternative Protocol: Exfiltration Over Asymmetric Encrypted Non-C2 Protocol

Exfiltration Over Alternative Protocol: Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol

Exfiltration Over Physical Medium

Exfiltration Over Physical Medium: Exfiltration over USB

Transfer Data to Cloud Account

Exfiltration Over Web Service

Exfiltration Over Web Service: Exfiltration to Code Repository

Exfiltration Over Web Service: Exfiltration to Cloud Storage

Impact

Select any Techniques used:

Data Destruction

Data Encrypted for Impact

Service Stop

Inhibit System Recovery

Defacement

Defacement: Internal Defacement

Defacement: External Defacement

Firmware Corruption

Resource Hijacking

Network Denial of Service

Network Denial of Service: Direct Network Flood

Network Denial of Service: Reflection Amplification

Endpoint Denial of Service

Endpoint Denial of Service: OS Exhaustion Flood

Endpoint Denial of Service: Service Exhaustion Flood

Endpoint Denial of Service: Application Exhaustion Flood

Endpoint Denial of Service: Application or System Exploitation

System Shutdown/Reboot

Account Access Removal

Disk Wipe

Disk Wipe: Disk Content Wipe

Disk Wipe: Disk Structure Wipe

Data Manipulation

Data Manipulation: Stored Data Manipulation

Data Manipulation: Transmitted Data Manipulation

Data Manipulation: Runtime Data Manipulation

Initial Access

Select any Techniques used:

Valid Accounts

Valid Accounts: Default Accounts

Valid Accounts: Domain Accounts

Valid Accounts: Local Accounts

Valid Accounts: Cloud Accounts

Replication Through Removable Media

External Remote Services

Drive-by Compromise

Exploit Public-Facing Application

Supply Chain Compromise

Supply Chain Compromise: Compromise Software Dependencies and Development Tools

Supply Chain Compromise: Compromise Software Supply Chain

Supply Chain Compromise: Compromise Hardware Supply Chain

Trusted Relationship

Hardware Additions

Phishing

Phishing: Spearphishing Attachment

Phishing: Spearphishing Link

Phishing: Spearphishing via Service

Lateral Movement

Select any Techniques used:

Remote Services

Remote Services: Remote Desktop Protocol

Remote Services: SMB/Windows Admin Shares

Remote Services: Distributed Component Object Model

Remote Services: SSH

Remote Services: VNC

Remote Services: Windows Remote Management

Software Deployment Tools

Taint Shared Content

Replication Through Removable Media

Exploitation of Remote Services

Internal Spearphishing

Use Alternate Authentication Material

Use Alternate Authentication Material: Application Access Token

Use Alternate Authentication Material: Pass the Hash

Use Alternate Authentication Material: Pass the Ticket

Use Alternate Authentication Material: Web Session Cookie

Remote Service Session Hijacking

Remote Service Session Hijacking: SSH Hijacking

Remote Service Session Hijacking: RDP Hijacking

Lateral Tool Transfer

Persistence

Select any Techniques used:

Boot or Logon Initialization Scripts

Boot or Logon Initialization Scripts: Logon Script (Windows)

Boot or Logon Initialization Scripts: Logon Script (Mac)

Boot or Logon Initialization Scripts: Network Logon Script

Boot or Logon Initialization Scripts: Rc.common

Boot or Logon Initialization Scripts: Startup Items

Scheduled Task/Job

Scheduled Task/Job: At (Linux)

Scheduled Task/Job: At (Windows)

Scheduled Task/Job: Cron

Scheduled Task/Job: Launchd

Scheduled Task/Job: Scheduled Task

Valid Accounts

Valid Accounts: Default Accounts

Valid Accounts: Domain Accounts

Valid Accounts: Local Accounts

Valid Accounts: Cloud Accounts

Account Manipulation

Account Manipulation: Additional Azure Service Principal Credentials

Account Manipulation: Exchange Email Delegate Permissions

Account Manipulation: Add Office 365 Global Administrator Role

Account Manipulation: SSH Authorized Keys

External Remote Services

Create Account

Create Account: Local Account

Create Account: Domain Account

Create Account: Cloud Account

Office Application Startup

Office Application Startup: Office Template Macros

Office Application Startup: Office Test

Office Application Startup: Outlook Forms

Office Application Startup: Outlook Home Page

Office Application Startup: Outlook Rules

Office Application Startup: Add-ins

Browser Extensions

BITS Jobs

Traffic Signaling

Traffic Signaling: Port Knocking

Server Software Component

Server Software Component: SQL Stored Procedures

Server Software Component: Transport Agent

Server Software Component: Web Shell

Implant Container Image

Pre-OS Boot

Pre-OS Boot: System Firmware

Pre-OS Boot: Component Firmware

Pre-OS Boot: Bootkit

Create or Modify System Process

Create or Modify System Process: Launch Agent

Create or Modify System Process: Systemd Service

Create or Modify System Process: Windows Service

Create or Modify System Process: Launch Daemon

Event Triggered Execution

Event Triggered Execution: Change Default File Association

Event Triggered Execution: Screensaver

Event Triggered Execution: Windows Management Instrumentation Event Subscription

Event Triggered Execution: .bash_profile and .bashrc

Event Triggered Execution: Trap

Event Triggered Execution: LC_LOAD_DYLIB Addition

Event Triggered Execution: Netsh Helper DLL

Event Triggered Execution: Accessibility Features

Event Triggered Execution: AppCert DLLs

Event Triggered Execution: AppInit DLLs

Event Triggered Execution: Application Shimming

Event Triggered Execution: Image File Execution Options Injection

Event Triggered Execution: PowerShell Profile

Event Triggered Execution: Emond

Event Triggered Execution: Component Object Model Hijacking

Boot or Logon Autostart Execution

Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder

Boot or Logon Autostart Execution: Authentication Package

Boot or Logon Autostart Execution: Time Providers

Boot or Logon Autostart Execution: Winlogon Helper DLL

Boot or Logon Autostart Execution: Security Support Provider

Boot or Logon Autostart Execution: Kernel Modules and Extensions

Boot or Logon Autostart Execution: Re-opened Applications

Boot or Logon Autostart Execution: LSASS Driver

Boot or Logon Autostart Execution: Shortcut Modification

Boot or Logon Autostart Execution: Port Monitors

Boot or Logon Autostart Execution: Plist Modification

Compromise Client Software Binary

Hijack Execution Flow

Hijack Execution Flow: DLL Search Order Hijacking

Hijack Execution Flow: DLL Side-Loading

Hijack Execution Flow: Dylib Hijacking

Hijack Execution Flow: Executable Installer File Permissions Weakness

Hijack Execution Flow: LD_PRELOAD

Hijack Execution Flow: Path Interception by PATH Environment Variable

Hijack Execution Flow: Path Interception by Search Order Hijacking

Hijack Execution Flow: Path Interception by Unquoted Path

Hijack Execution Flow: Services File Permissions Weakness

Hijack Execution Flow: Services Registry Permissions Weakness

Hijack Execution Flow: COR_PROFILER

Privilege Escalation

Select any Techniques used:

Boot or Logon Initialization Scripts

Boot or Logon Initialization Scripts: Logon Script (Windows)

Boot or Logon Initialization Scripts: Logon Script (Mac)

Boot or Logon Initialization Scripts: Network Logon Script

Boot or Logon Initialization Scripts: Rc.common

Boot or Logon Initialization Scripts: Startup Items

Scheduled Task/Job

Scheduled Task/Job: At (Linux)

Scheduled Task/Job: At (Windows)

Scheduled Task/Job: Cron

Scheduled Task/Job: Launchd

Scheduled Task/Job: Scheduled Task

Process Injection

Process Injection: Dynamic-link Library Injection

Process Injection: Portable Executable Injection

Process Injection: Thread Execution Hijacking

Process Injection: Asynchronous Procedure Call

Process Injection: Thread Local Storage

Process Injection: Ptrace System Calls

Process Injection: Proc Memory

Process Injection: Extra Window Memory Injection

Process Injection: Process Hollowing

Process Injection: Process Doppelgänging

Process Injection: VDSO Hijacking

Exploitation for Privilege Escalation

Valid Accounts

Valid Accounts: Default Accounts

Valid Accounts: Domain Accounts

Valid Accounts: Local Accounts

Valid Accounts: Cloud Accounts

Access Token Manipulation

Access Token Manipulation: Token Impersonation/Theft

Access Token Manipulation: Create Process with Token

Access Token Manipulation: Make and Impersonate Token

Access Token Manipulation: Parent PID Spoofing

Access Token Manipulation: SID-History Injection

Group Policy Modification

Create or Modify System Process

Create or Modify System Process: Launch Agent

Create or Modify System Process: Systemd Service

Create or Modify System Process: Windows Service

Create or Modify System Process: Launch Daemon

Event Triggered Execution

Event Triggered Execution: Change Default File Association

Event Triggered Execution: Screensaver

Event Triggered Execution: Windows Management Instrumentation Event Subscription

Event Triggered Execution: .bash_profile and .bashrc

Event Triggered Execution: Trap

Event Triggered Execution: LC_LOAD_DYLIB Addition

Event Triggered Execution: Netsh Helper DLL

Event Triggered Execution: Accessibility Features

Event Triggered Execution: AppCert DLLs

Event Triggered Execution: AppInit DLLs

Event Triggered Execution: Application Shimming

Event Triggered Execution: Image File Execution Options Injection

Event Triggered Execution: PowerShell Profile

Event Triggered Execution: Emond

Event Triggered Execution: Component Object Model Hijacking

Boot or Logon Autostart Execution

Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder

Boot or Logon Autostart Execution: Authentication Package

Boot or Logon Autostart Execution: Time Providers

Boot or Logon Autostart Execution: Winlogon Helper DLL

Boot or Logon Autostart Execution: Security Support Provider

Boot or Logon Autostart Execution: Kernel Modules and Extensions

Boot or Logon Autostart Execution: Re-opened Applications

Boot or Logon Autostart Execution: LSASS Driver

Boot or Logon Autostart Execution: Shortcut Modification

Boot or Logon Autostart Execution: Port Monitors

Boot or Logon Autostart Execution: Plist Modification

Abuse Elevation Control Mechanism

Abuse Elevation Control Mechanism: Setuid and Setgid

Abuse Elevation Control Mechanism: Bypass User Access Control

Abuse Elevation Control Mechanism: Sudo and Sudo Caching

Abuse Elevation Control Mechanism: Elevated Execution with Prompt

Hijack Execution Flow

Hijack Execution Flow: DLL Search Order Hijacking

Hijack Execution Flow: DLL Side-Loading

Hijack Execution Flow: Dylib Hijacking

Hijack Execution Flow: Executable Installer File Permissions Weakness

Hijack Execution Flow: LD_PRELOAD

Hijack Execution Flow: Path Interception by PATH Environment Variable

Hijack Execution Flow: Path Interception by Search Order Hijacking

Hijack Execution Flow: Path Interception by Unquoted Path

Hijack Execution Flow: Services File Permissions Weakness

Hijack Execution Flow: Services Registry Permissions Weakness

Hijack Execution Flow: COR_PROFILER

Topic Tags

Select the tags that apply to this CVE (Assessment added tags are disabled and cannot be removed)

What makes this of high-value to an attacker?

Vulnerable in default configuration

Unauthenticated

Observed in state-sponsored attacks

Observed in ransomware attacks

Gives privileged access

Easy to weaponize

Difficult to patch

Common in enterprise

CISA KEV Listed

What makes this of low-value to an attacker?

Vulnerable in uncommon configuration

Requires user interaction

Requires physical access

Requires elevated access

No useful access

Difficult to weaponize

Authenticated

Description

Improper input validation in the BIOS firmware for some Intel® Processors may allow an authenticated user to potentially enable denial of service via adjacent access.

See More See Less

Ratings & Analysis
Vulnerability Details

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

3.5 Low

Impact Score:

1.4

Exploitability Score:

2.1

Vector:

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Attack Vector (AV):

Adjacent_network

Attack Complexity (AC):

Low

Privileges Required (PR):

Low

User Interaction (UI):

None

Scope (S):

Unchanged

Confidentiality (C):

None

Integrity (I):

None

Availability (A):

Low

General Information

Offensive Application

Unknown

Utility Class

Unknown

Ports

Unknown

Vulnerable Versions

Intel(R) Processors See references

Prerequisites

Unknown

Discovered By

Unknown

PoC Author

Unknown

Metasploit Module

Unknown

Reporter

Unknown

Vendors

intel

Products

atom x6200fe firmware
atom x6211e firmware
atom x6212re firmware
atom x6413e firmware
atom x6414re firmware
atom x6425e firmware
atom x6425re firmware
atom x6427fe firmware
celeron 1000m firmware
celeron 1005m firmware
celeron 1007u firmware
celeron 1017u firmware
celeron 1019y firmware
celeron 1020e firmware
celeron 1020m firmware
celeron 1037u firmware
celeron 1047ue firmware
celeron 2000e firmware
celeron 2002e firmware
celeron 2950m firmware
celeron 2955u firmware
celeron 2957u firmware
celeron 2961y firmware
celeron 2970m firmware
celeron 2980u firmware
celeron 2981u firmware
celeron 3205u firmware
celeron 3215u firmware
celeron 3755u firmware
celeron 3765u firmware
celeron 3855u firmware
celeron 3865u firmware
celeron 3867u firmware
celeron 3955u firmware
celeron 3965u firmware
celeron 3965y firmware
celeron 4205u firmware
celeron 4305u firmware
celeron 4305ue firmware
celeron 5205u firmware
celeron 5305u firmware
celeron 6305 firmware
celeron 6305e firmware
celeron 6600he firmware
celeron 725c firmware
celeron 7300 firmware
celeron 7305 firmware
celeron 7305e firmware
celeron 7305l firmware
celeron 787 firmware
celeron 797 firmware
celeron 807 firmware
celeron 807ue firmware
celeron 827e firmware
celeron 847 firmware
celeron 847e firmware
celeron 857 firmware
celeron 867 firmware
celeron 877 firmware
celeron 887 firmware
celeron 927ue firmware
celeron b710 firmware
celeron b720 firmware
celeron b800 firmware
celeron b810 firmware
celeron b810e firmware
celeron b815 firmware
celeron b820 firmware
celeron b830 firmware
celeron b840 firmware
celeron g1610 firmware
celeron g1610t firmware
celeron g1620 firmware
celeron g1620t firmware
celeron g1630 firmware
celeron g1820 firmware
celeron g1820t firmware
celeron g1820te firmware
celeron g1830 firmware
celeron g1840 firmware
celeron g1840t firmware
celeron g1850 firmware
celeron g3900 firmware
celeron g3900e firmware
celeron g3900t firmware
celeron g3900te firmware
celeron g3902e firmware
celeron g3920 firmware
celeron g3920t firmware
celeron g3930 firmware
celeron g3930e firmware
celeron g3930t firmware
celeron g3930te firmware
celeron g3940 firmware
celeron g3950 firmware
celeron g440 firmware
celeron g460 firmware
celeron g465 firmware
celeron g470 firmware
celeron g4900 firmware
celeron g4900t firmware
celeron g4920 firmware
celeron g4930 firmware
celeron g4930e firmware
celeron g4930t firmware
celeron g4932e firmware
celeron g4950 firmware
celeron g5205u firmware
celeron g530 firmware
celeron g5305u firmware
celeron g530t firmware
celeron g540 firmware
celeron g540t firmware
celeron g550 firmware
celeron g550t firmware
celeron g555 firmware
celeron g5900 firmware
celeron g5900e firmware
celeron g5900t firmware
celeron g5900te firmware
celeron g5905 firmware
celeron g5905t firmware
celeron g5920 firmware
celeron g5925 firmware
celeron g6900 firmware
celeron g6900e firmware
celeron g6900t firmware
celeron g6900te firmware
celeron j1750 firmware
celeron j1800 firmware
celeron j1850 firmware
celeron j1900 firmware
celeron j3060 firmware
celeron j3160 firmware
celeron j3355 firmware
celeron j3355e firmware
celeron j3455 firmware
celeron j3455e firmware
celeron j4005 firmware
celeron j4025 firmware
celeron j4105 firmware
celeron j4115 firmware
celeron j4125 firmware
celeron j6412 firmware
celeron j6413 firmware
celeron n2805 firmware
celeron n2806 firmware
celeron n2807 firmware
celeron n2808 firmware
celeron n2810 firmware
celeron n2815 firmware
celeron n2820 firmware
celeron n2830 firmware
celeron n2840 firmware
celeron n2910 firmware
celeron n2920 firmware
celeron n2930 firmware
celeron n2940 firmware
celeron n3000 firmware
celeron n3010 firmware
celeron n3050 firmware
celeron n3060 firmware
celeron n3150 firmware
celeron n3160 firmware
celeron n3350 firmware
celeron n3350e firmware
celeron n3450 firmware
celeron n3520 firmware
celeron n3700 firmware
celeron n4000 firmware
celeron n4000c firmware
celeron n4020 firmware
celeron n4020c firmware
celeron n4100 firmware
celeron n4120 firmware
celeron n4500 firmware
celeron n4504 firmware
celeron n4505 firmware
celeron n5095 firmware
celeron n5100 firmware
celeron n5105 firmware
celeron n6210 firmware
celeron n6211 firmware
core i3 1000g1 firmware
core i3 1000g4 firmware
core i3 1005g1 firmware
core i3 10100 firmware
core i3 10100e firmware
core i3 10100f firmware
core i3 10100t firmware
core i3 10100te firmware
core i3 10100y firmware
core i3 10105 firmware
core i3 10105f firmware
core i3 10105t firmware
core i3 10110u firmware
core i3 10110y firmware
core i3 10300 firmware
core i3 10300t firmware
core i3 10305 firmware
core i3 10305t firmware
core i3 10320 firmware
core i3 10325 firmware
core i3 11100he firmware
core i3 1110g4 firmware
core i3 1115g4 firmware
core i3 1115g4e firmware
core i3 1115gre firmware
core i3 1120g4 firmware
core i3 1125g4 firmware
core i3 12100 firmware
core i3 12100e firmware
core i3 12100f firmware
core i3 12100t firmware
core i3 12100te firmware
core i3 1210u firmware
core i3 1215u firmware
core i3 1215ue firmware
core i3 1215ul firmware
core i3 1220p firmware
core i3 1220pe firmware
core i3 12300 firmware
core i3 12300he firmware
core i3 12300hl firmware
core i3 12300t firmware
core i3 1305u firmware
core i3 13100 firmware
core i3 13100e firmware
core i3 13100f firmware
core i3 13100t firmware
core i3 13100te firmware
core i3 1315u firmware
core i3 1315ue firmware
core i3 1315ure firmware
core i3 1320pe firmware
core i3 1320pre firmware
core i3 13300he firmware
core i3 13300hre firmware
core i3 8100 firmware
core i3 8100b firmware
core i3 8100h firmware
core i3 8100t firmware
core i3 8109u firmware
core i3 8130u firmware
core i3 8140u firmware
core i3 8145u firmware
core i3 8145ue firmware
core i3 8300 firmware
core i3 8300t firmware
core i3 8350k firmware
core i3 9100 firmware
core i3 9100e firmware
core i3 9100f firmware
core i3 9100hl firmware
core i3 9100t firmware
core i3 9100te firmware
core i3 9300 firmware
core i3 9300t firmware
core i3 9320 firmware
core i3 9350k firmware
core i3 9350kf firmware
core i5 10200h firmware
core i5 10210u firmware
core i5 10210y firmware
core i5 10300h firmware
core i5 1030g4 firmware
core i5 1030g7 firmware
core i5 10310u firmware
core i5 10310y firmware
core i5 1035g1 firmware
core i5 1035g4 firmware
core i5 1035g7 firmware
core i5 1038ng7 firmware
core i5 10400 firmware
core i5 10400f firmware
core i5 10400h firmware
core i5 10400t firmware
core i5 10500 firmware
core i5 10500e firmware
core i5 10500h firmware
core i5 10500t firmware
core i5 10500te firmware
core i5 10505 firmware
core i5 10600 firmware
core i5 10600k firmware
core i5 10600kf firmware
core i5 10600t firmware
core i5 11260h firmware
core i5 11300h firmware
core i5 1130g7 firmware
core i5 11320h firmware
core i5 1135g7 firmware
core i5 11400 firmware
core i5 11400f firmware
core i5 11400h firmware
core i5 11400t firmware
core i5 1140g7 firmware
core i5 1145g7 firmware
core i5 1145g7e firmware
core i5 1145gre firmware
core i5 11500 firmware
core i5 11500h firmware
core i5 11500he firmware
core i5 11500t firmware
core i5 1155g7 firmware
core i5 11600 firmware
core i5 11600k firmware
core i5 11600kf firmware
core i5 11600t firmware
core i5 1230u firmware
core i5 1235u firmware
core i5 1235ul firmware
core i5 12400 firmware
core i5 12400f firmware
core i5 12400t firmware
core i5 1240p firmware
core i5 1240u firmware
core i5 12450h firmware
core i5 12450hx firmware
core i5 1245u firmware
core i5 1245ue firmware
core i5 1245ul firmware
core i5 12500 firmware
core i5 12500e firmware
core i5 12500h firmware
core i5 12500hl firmware
core i5 12500t firmware
core i5 12500te firmware
core i5 1250p firmware
core i5 1250pe firmware
core i5 12600 firmware
core i5 12600h firmware
core i5 12600he firmware
core i5 12600hl firmware
core i5 12600hx firmware
core i5 12600k firmware
core i5 12600kf firmware
core i5 12600t firmware
core i5 1334u firmware
core i5 1335u firmware
core i5 1335ue firmware
core i5 13400 firmware
core i5 13400e firmware
core i5 13400f firmware
core i5 13400t firmware
core i5 1340p firmware
core i5 1340pe firmware
core i5 13420h firmware
core i5 13450hx firmware
core i5 1345u firmware
core i5 1345ue firmware
core i5 1345ure firmware
core i5 13500 firmware
core i5 13500e firmware
core i5 13500h firmware
core i5 13500hx firmware
core i5 13500t firmware
core i5 13500te firmware
core i5 13505h firmware
core i5 1350p firmware
core i5 1350pe firmware
core i5 1350pre firmware
core i5 13600 firmware
core i5 13600h firmware
core i5 13600he firmware
core i5 13600hre firmware
core i5 13600hx firmware
core i5 13600k firmware
core i5 13600kf firmware
core i5 13600t firmware
core i5 8200y firmware
core i5 8210y firmware
core i5 8250u firmware
core i5 8257u firmware
core i5 8259u firmware
core i5 8260u firmware
core i5 8265u firmware
core i5 8269u firmware
core i5 8279u firmware
core i5 8300h firmware
core i5 8305g firmware
core i5 8310y firmware
core i5 8350u firmware
core i5 8365u firmware
core i5 8365ue firmware
core i5 8400 firmware
core i5 8400b firmware
core i5 8400h firmware
core i5 8400t firmware
core i5 8500 firmware
core i5 8500b firmware
core i5 8500t firmware
core i5 8600 firmware
core i5 8600k firmware
core i5 8600t firmware
core i5 9300h firmware
core i5 9300hf firmware
core i5 9400 firmware
core i5 9400f firmware
core i5 9400h firmware
core i5 9400t firmware
core i5 9500 firmware
core i5 9500e firmware
core i5 9500f firmware
core i5 9500t firmware
core i5 9500te firmware
core i5 9600 firmware
core i5 9600k firmware
core i5 9600kf firmware
core i5 9600t firmware
core i7+8700 firmware
core i7 10510u firmware
core i7 10510y firmware
core i7 1060g7 firmware
core i7 10610u firmware
core i7 1065g7 firmware
core i7 1068ng7 firmware
core i7 10700 firmware
core i7 10700e firmware
core i7 10700f firmware
core i7 10700k firmware
core i7 10700kf firmware
core i7 10700t firmware
core i7 10700te firmware
core i7 10710u firmware
core i7 10750h firmware
core i7 10810u firmware
core i7 10850h firmware
core i7 10870h firmware
core i7 10875h firmware
core i7 11370h firmware
core i7 11375h firmware
core i7 11390h firmware
core i7 11600h firmware
core i7 1160g7 firmware
core i7 1165g7 firmware
core i7 11700 firmware
core i7 11700f firmware
core i7 11700k firmware
core i7 11700kf firmware
core i7 11700t firmware
core i7 11800h firmware
core i7 1180g7 firmware
core i7 11850h firmware
core i7 11850he firmware
core i7 1185g7 firmware
core i7 1185g7e firmware
core i7 1185gre firmware
core i7 1195g7 firmware
core i7 1250u firmware
core i7 1255u firmware
core i7 1255ul firmware
core i7 1260p firmware
core i7 1260u firmware
core i7 12650h firmware
core i7 12650hx firmware
core i7 1265u firmware
core i7 1265ue firmware
core i7 1265ul firmware
core i7 12700 firmware
core i7 12700e firmware
core i7 12700f firmware
core i7 12700h firmware
core i7 12700hl firmware
core i7 12700k firmware
core i7 12700kf firmware
core i7 12700t firmware
core i7 12700te firmware
core i7 1270p firmware
core i7 1270pe firmware
core i7 12800h firmware
core i7 12800he firmware
core i7 12800hl firmware
core i7 12800hx firmware
core i7 1280p firmware
core i7 12850hx firmware
core i7 1355u firmware
core i7 1360p firmware
core i7 13620h firmware
core i7 13650hx firmware
core i7 1365u firmware
core i7 1365ue firmware
core i7 1365ure firmware
core i7 1366ure firmware
core i7 13700 firmware
core i7 13700e firmware
core i7 13700f firmware
core i7 13700h firmware
core i7 13700hx firmware
core i7 13700k firmware
core i7 13700kf firmware
core i7 13700t firmware
core i7 13700te firmware
core i7 13705h firmware
core i7 1370p firmware
core i7 1370pe firmware
core i7 1370pre firmware
core i7 1375pre firmware
core i7 13800h firmware
core i7 13800he firmware
core i7 13800hre firmware
core i7 13850hx firmware
core i7 8086k firmware
core i7 8500y firmware
core i7 8550u firmware
core i7 8557u firmware
core i7 8559u firmware
core i7 8565u firmware
core i7 8569u firmware
core i7 8650u firmware
core i7 8665u firmware
core i7 8665ue firmware
core i7 8700 firmware
core i7 8700b firmware
core i7 8700k firmware
core i7 8700t firmware
core i7 8705g firmware
core i7 8706g firmware
core i7 8709g firmware
core i7 8750h firmware
core i7 8809g firmware
core i7 8850h firmware
core i7 9700 firmware
core i7 9700e firmware
core i7 9700f firmware
core i7 9700k firmware
core i7 9700kf firmware
core i7 9700t firmware
core i7 9700te firmware
core i7 9750h firmware
core i7 9750hf firmware
core i7 9850h firmware
core i7 9850he firmware
core i7 9850hl firmware
core i9 10850k firmware
core i9 10885h firmware
core i9 10900 firmware
core i9 10900e firmware
core i9 10900f firmware
core i9 10900k firmware
core i9 10900kf firmware
core i9 10900t firmware
core i9 10900te firmware
core i9 10980hk firmware
core i9 11900 firmware
core i9 11900f firmware
core i9 11900h firmware
core i9 11900k firmware
core i9 11900kf firmware
core i9 11900t firmware
core i9 11950h firmware
core i9 11980hk firmware
core i9 12900 firmware
core i9 12900e firmware
core i9 12900f firmware
core i9 12900h firmware
core i9 12900hk firmware
core i9 12900hx firmware
core i9 12900k firmware
core i9 12900kf firmware
core i9 12900ks firmware
core i9 12900t firmware
core i9 12900te firmware
core i9 12950hx firmware
core i9 13900 firmware
core i9 13900e firmware
core i9 13900f firmware
core i9 13900h firmware
core i9 13900hk firmware
core i9 13900hx firmware
core i9 13900k firmware
core i9 13900kf firmware
core i9 13900ks firmware
core i9 13900t firmware
core i9 13900te firmware
core i9 13905h firmware
core i9 13950hx firmware
core i9 13980hx firmware
core i9 8950hk firmware
core i9 9880h firmware
core i9 9900 firmware
core i9 9900k firmware
core i9 9900kf firmware
core i9 9900ks firmware
core i9 9900t firmware
core i9 9980hk firmware
core m3 8100y firmware
pentium gold 4410y firmware
pentium gold 4415u firmware
pentium gold 4415y firmware
pentium gold 4417u firmware
pentium gold 4425y firmware
pentium gold 5405u firmware
pentium gold 6405u firmware
pentium gold 6500y firmware
pentium gold 7505 firmware
pentium gold 8500 firmware
pentium gold 8505 firmware
pentium gold g4560 firmware
pentium gold g4600 firmware
pentium gold g4620 firmware
pentium gold g5400 firmware
pentium gold g5400t firmware
pentium gold g5420 firmware
pentium gold g5420t firmware
pentium gold g5500 firmware
pentium gold g5500t firmware
pentium gold g5600 firmware
pentium gold g5600t firmware
pentium gold g5620 firmware
pentium gold g6400 firmware
pentium gold g6400e firmware
pentium gold g6400t firmware
pentium gold g6400te firmware
pentium gold g6405 firmware
pentium gold g6405t firmware
pentium gold g6405u firmware
pentium gold g6500 firmware
pentium gold g6500t firmware
pentium gold g6505 firmware
pentium gold g6505t firmware
pentium gold g6600 firmware
pentium gold g6605 firmware
pentium gold g7400 firmware
pentium gold g7400e firmware
pentium gold g7400t firmware
pentium gold g7400te firmware
pentium j6425 firmware
pentium n6415 firmware

References

Canonical

CVE-2023-22329 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22329)

Miscellaneous

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00924.html

https://security.netapp.com/advisory/ntap-20231221-0008/

Additional Info

Authenticated

Unknown

Exploitable

Unknown

Reliability

Unknown

Stability

Unknown

Available Mitigations

Unknown

Shelf Life

Unknown

Userbase/Installbase

Unknown

Patch Effectiveness

Unknown

Rapid7

Technical Analysis

Report as Emergent Threat Response

Please provide the link to the ETR blog if available.

Add a reference URL (optional):

Report as Zero-day Exploit

Please provide the link to the zero-day exploit reference.

Note: The source link you provide will create a new misc reference if it doesn't already exist.

Add a reference URL (optional):

Report as Exploited in the Wild

AttackerKB users want to know this is information they can trust.
Help the community by indicating the source(s) of your knowledge:

Vendor Advisory

Add a reference URL (required):

Please provide a link to the Vendor Advisory.
Government or Industry Alert

Add a reference URL (required):

Please provide a link to the Government or Industry Alert.
Threat Feed

Add a reference URL (required):

Please provide a link to the Threat Feed.
News Article or Blog

Add a reference URL (required):

Please provide a link to the News Reference.
Exploitation personally observed in an environment (client, customer, employer, or personal environment)

Add a reference URL (required):

Please provide a link or create an assessment as evidence to support your personal observation claim.
Other:

Please explain the source of your report.

Add a reference URL (required):

Please provide a link or create an assessment as evidence of the source of your report.

CVE ID

AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:

CVE ID:

Unknown

CVE-2023-22329

Unknown

Unknown

None

Low

Adjacent_network

CVE-2023-22329

Description

Add Assessment

CVSS V3 Severity and Metrics

General Information

Vendors

Products

References

Canonical

Miscellaneous

Additional Info

Technical Analysis

Quick Cookie Notification