PT-2018-16117 · Intel · Intel Processor Diagnostic Tool

Publicado 2018-07-10 · Atualizado 2019-10-03 · CVE-2018-3667

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Processor Diagnostic Tool version 4.1.0.24

Description The issue concerns the installation tool IPDT, which sets permissions of installed files incorrectly. This incorrect setting allows for the execution of arbitrary code and potential privilege escalation.

Recommendations For Intel Processor Diagnostic Tool version 4.1.0.24, update the installation to correctly set permissions of installed files to prevent arbitrary code execution and potential privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-1188

Identificadores relacionados

CVE-2018-3667

Produtos afetados

Intel Processor Diagnostic Tool

Referências · 3

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00140.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-3667 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-3667 · Aviso do Fabricante