CVE-2023-45743 is a medium severity uncontrolled search path flaw in some Intel Driver and Support Assistant uninstallers, scored 6.7. A local authenticated user may escalate privileges. Intel fixed it in version 23.4.39.10, so update older installs. The issue is in the uninstaller, so old copies may linger on machines.
What's affected
Per Intel advisory SA-01031 and the NVD record, Intel DSA software uninstallers before version 23.4.39.10 are affected, and 23.4.39.10 or later is the fix. The CVSS 3.1 score is 6.7, medium, with the vector CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H.
The wording is specific: the issue is in the uninstaller, not in the assistant's normal operation. That affects how you check for it, since an old uninstaller can remain on a machine long after the application was updated.
How to check if you're exposed
Intel Driver and Support Assistant is a Windows utility that checks for driver updates, so it is common on workstations and laptops with Intel hardware. List installed copies and their versions:
Get-ItemProperty HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\* | Where-Object DisplayName -like "*Driver*Support Assistant*" | Select DisplayName, DisplayVersion
Any version below 23.4.39.10 is in scope. If your endpoint tool reports software versions, query it for the same name so you do not rely on checking machines one at a time.
What to do now
- Inventory Intel Driver and Support Assistant installs and their versions.
- Update to 23.4.39.10 or later.
- Remove the tool from machines where a managed driver process already exists.
- Check that standard users cannot write to folders that privileged installers search.
- Add the tool to your software inventory so version drift shows up.
Why it matters
An uncontrolled search path, CWE-427, means a program looks for a file in a location a lower privileged user can influence. If the program runs with administrator rights, as an uninstaller often does, it may load code the user supplied. The record lists this CWE twice, and Intel's advisory uses it for the issue.
The score is 6.7 because the attack is local, complex, and needs the user to run the uninstaller. The risk is greatest on shared machines.
The CVE is not on the CISA KEV list, and the advisory does not report exploitation.
To tidy up after the update, confirm that no older DSA uninstaller remains in the programs list, and that the install directory permissions match your standard. Old uninstallers are easy to forget because nobody runs them until a machine is retired.
Safeguard's free in-browser dependency scan at gold.safeguard.sh/scan reads the manifests and lockfiles of software projects. It will not see firmware or device images, so for this issue the asset inventory and the vendor advisory are your main tools.
Quick check
Is the assistant itself affected or only the uninstaller?
The record and the advisory describe the uninstaller software before 23.4.39.10.
What is the fixed version?
23.4.39.10 or later, per Intel.
Sources
Last reviewed: 19 October 2026.
