PT-2026-7286 · Intel · Intel Optane Pmem Management

Publicado 2026-02-10 · Atualizado 2026-02-10 · CVE-2025-22849

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Optane(TM) PMem management software versions CR MGMT 01.00.00.3584, CR MGMT 02.00.00.4052, CR MGMT 03.00.00.0538

Description The software has default permissions that may allow a privilege escalation. An unprivileged software adversary with an authenticated user and a high complexity attack may be able to escalate privileges. This may occur via local access with active user interaction. The potential impacts to the system include confidentiality, integrity, and availability.

Recommendations Update to version CR MGMT 01.00.00.3584 or later. Update to version CR MGMT 02.00.00.4052 or later. Update to version CR MGMT 03.00.00.0538 or later.

Correção

Incorrect Default Permissions

Enumeração de Fraquezas

CWE-276

Identificadores relacionados

CVE-2025-22849

Produtos afetados

Intel Optane Pmem Management

Referências · 3

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01323.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-22849 · Nota de Segurança
• https://twitter.com/CVEnew/status/2021279091324797206 · Publicação no Twitter