CVE-2023-29242

Published: May 12, 2023Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Improper access control for Intel(R) oneAPI Toolkits before version 2021.1 Beta 10 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected (6)

Products: Intel: Oneapi Ai Analytics Toolkit, Oneapi Base Toolkit, Oneapi Dl Framework Developer Toolkit, Oneapi Hpc Toolkit, Oneapi Iot Toolkit, Oneapi Rendering Toolkit

Intel

6 products

Oneapi Ai Analytics Toolkit

Oneapi Base Toolkit

Oneapi Dl Framework Developer Toolkit

Oneapi Hpc Toolkit

Oneapi Iot Toolkit

Oneapi Rendering Toolkit

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Intel Oneapi Ai Analytics Toolkit	Up to 2021.1
Intel Oneapi Base Toolkit	Up to 2021.1
Intel Oneapi Dl Framework Developer Toolkit	Up to 2021.1
Intel Oneapi Hpc Toolkit	Up to 2021.1
Intel Oneapi Iot Toolkit	Up to 2021.1
Intel Oneapi Rendering Toolkit	Up to 2021.1

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00551.html

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00551.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.