PT-2018-11033 · Intel · Intel Driver & Support Assistant

Publicado 2018-09-12 · Atualizado 2019-10-03 · CVE-2018-12148

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Driver and Support Assistant versions prior to 3.5.0.1

Description The issue concerns a privilege escalation in file permissions, potentially allowing an authenticated user to execute code as an administrator via local access.

Recommendations For versions prior to 3.5.0.1, update to version 3.5.0.1 or later to resolve the issue.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2018-12148

Produtos afetados

Intel Driver & Support Assistant

Referências · 3

• https://osv.dev/vulnerability/CVE-2018-12148 · Aviso do Fabricante
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00165.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-12148 · Nota de Segurança