PT-2018-3418 · Intel · Intel Rste+1

Publicado 2018-10-10 · Atualizado 2019-10-25 · CVE-2018-12131

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Intel NVMe versions prior to 4.0.0.1007 Intel RSTe versions prior to 4.7.0.2083

Description: The issue is related to errors in managing privileges in the driver pack installers for Intel NVMe and Intel RSTe. This may allow an authenticated user to potentially escalate privileges via local access. Exploitation of the issue could enable an attacker to increase their privileges.

Recommendations: For Intel NVMe versions prior to 4.0.0.1007, update to version 4.0.0.1007 or later. For Intel RSTe versions prior to 4.7.0.2083, update to version 4.7.0.2083 or later.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

BDU:2020-00817

CVE-2018-12131

Produtos afetados

Intel Nvme

Intel Rste

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-12131 · Nota de Segurança
• https://support.hp.com/us-en/document/c06481941 · Nota
• https://bdu.fstec.ru/vul/2020-00817 · Nota de Segurança
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00154.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-12131 · Aviso do Fabricante