PT-2019-1750 · Intel · Intel Usb 3.0 Creator Utility

Publicado 2019-03-12 · Atualizado 2019-03-15 · CVE-2019-0129

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Intel USB 3.0 Creator Utility versions all

Description The issue is related to insufficient access control in the Intel USB 3.0 Creator Utility, which may allow an authenticated user to potentially enable escalation of privilege via local access.

Recommendations For Intel USB 3.0 Creator Utility versions all, consider restricting local access to the utility until a fix is available. As a temporary workaround, review and adjust the permissions settings to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2019-01389

CVE-2019-0129

Produtos afetados

Intel Usb 3.0 Creator Utility

Referências · 4

• https://intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00229.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-0129 · Nota de Segurança
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00229.html · Nota
• https://bdu.fstec.ru/vul/2019-01389 · Nota de Segurança