Vulnerabilities > CVE-2023-31203 - Unspecified vulnerability in Intel Openvino Model Server

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

intel

NVD

Published: 2023-11-14

Updated: 2023-11-21

Summary

Improper input validation in some OpenVINO Model Server software before version 2022.3 for Intel Distribution of OpenVINO toolkit may allow an unauthenticated user to potentially enable denial of service via network access.

Vulnerable Configurations

Part	Description	Count
Application	Intel Intel Openvino Model Server 2019.1 Intel Openvino Model Server 2019.1.1 Intel Openvino Model Server 2019.2 Intel Openvino Model Server 2019.3 Intel Openvino Model Server 2020.1 Intel Openvino Model Server 2020.3 Intel Openvino Model Server 2020.4 Intel Openvino Model Server 2021.1 Intel Openvino Model Server 2021.2 Intel Openvino Model Server 2021.2.1 Intel Openvino Model Server 2021.3 Intel Openvino Model Server 2021.4 Intel Openvino Model Server 2021.4.1 Intel Openvino Model Server 2021.4.2 Intel Openvino Model Server 2022.1 Intel Openvino Model Server 2022.2	16

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00901.html