CVE-2023-39432 is a medium severity (CVSS 6.7) improper access control flaw in some Intel Ethernet tools and driver install software before version 28.2. An authenticated local user could potentially escalate privileges. Intel's advisory is INTEL-SA-00993. Update the Ethernet adapter driver package to 28.2 or later.
What's affected
The NVD record names the Intel Ethernet Adapter Complete Driver package, with versions before 28.2 affected. The record scores it 6.7 (Medium) with the vector CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H: a local attack, high attack complexity, low privileges and user interaction required.
The weakness class is CWE-284 (improper access control). The fixed version, per the record, is 28.2. We could not load Intel's advisory page (it returned an access denied message), so this post relies on the NVD description. The record does not mark this CVE as being in the CISA Known Exploited Vulnerabilities catalog, and nothing we could read says it is exploited in the wild.
How to check if you're exposed
On Windows, check the version of the Intel Ethernet Adapter Complete Driver Pack or the driver install software in Settings, then Apps, then Installed apps. On a managed fleet, list installed software and search for the product name.
The software often arrives with server and workstation images from the hardware vendor. Check your golden images and deployment packages, not only machines in use, since an old image will bring the old version back.
What to do now
- Find the Intel Ethernet driver install software and tools across your fleet and images.
- Update to version 28.2 or later and refresh the packages in your deployment images. Confirm the fixed version in Intel advisory INTEL-SA-00993.
- Limit who has local accounts on servers and shared workstations.
- Rebuild or patch images so that new machines are not deployed with the old package.
Why it matters
The record describes improper access control in the install software and tools. The details are not public in the record, so we cannot say which files or permissions are involved. It says an authenticated local user could potentially escalate privileges.
The medium score comes from several factors in the vector: high attack complexity, a need for user interaction, and a local position. It is a reasonable item for the normal patch cycle. The one place to be quicker is shared machines with many local accounts, such as lab or build servers, where a local escalation is a more realistic route.
Quick check
Why is the score only medium?
The vector needs local access, high attack complexity and user interaction. That keeps it at 6.7 despite high impact ratings.
Is it the same as the DSA flaw?
No. CVE-2023-39425 covers Intel Driver and Support Assistant, with a different advisory, INTEL-SA-00969.
Sources
- Intel advisory INTEL-SA-00993 (listed in the record; the page returned access denied for us)
- Safeguard Gold entry for CVE-2023-39432
Last reviewed: 19 October 2026.
