CVE-2023-50197

Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Intel Driver & Support Assistant. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DSA Service. By creating a symbolic link, an attacker can abuse the service to write a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-21845.

• CWE-59

• https://www.zerodayinitiative.com/advisories/ZDI-23-1773/Third Party Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-23-1773/Third Party Advisory

Published

May 3, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-50191Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remo…7.8
• CVE-2023-50192Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remo…7.8
• CVE-2023-50193Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remo…7.8
• CVE-2023-50194Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read …7.8
• CVE-2023-50195Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read …7.8
• CVE-2023-50196Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remo…7.8
• CVE-2023-50198D-Link G416 cfgsave Command Injection Remote Code Execution …8.8
• CVE-2023-50199D-Link G416 httpd Missing Authentication for Critical Functi…8.8
• CVE-2023-5020A vulnerability, which was classified as critical, has been …9.8
• CVE-2023-50200D-Link G416 cfgsave backusb Command Injection Remote Code Ex…8.8
• CVE-2023-50201D-Link G416 cfgsave upusb Command Injection Remote Code Exec…8.8
• CVE-2023-50202D-Link G416 flupl pythonmodules Command Injection Remote Cod…8.8