J00Sean

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows versions prior to March 11, 2025 **Description** External control of file names or paths in the Windows NTLM (NT LAN Manager) protocol allows an unauthorized attacker to perform spoofing over a network. This issue, specifically affecting the File Explorer component, can lead to the disclosure of NTLM hashes. Attackers can exploit this by convincing a user to unpack a malicious archive or open malicious `.library-ms` files, which triggers Windows Explorer to automatically initiate an SMB authentication request to an attacker-controlled SMB server. Real-world incidents have been recorded, including global phishing campaigns and targeted attacks against government entities in Poland and Romania, potentially linked to APT28. **Recommendations** Update to the security patch released on March 11, 2025. Restrict the use of NTLM. Avoid opening or unpacking unknown files from untrusted sources.

**Name of the Vulnerable Software and Affected Versions** Intel(R) Ethernet Adapter Complete Driver Pack versions prior to 29.1 **Description** The issue is related to an uncontrolled search path in some installations of the Intel(R) Ethernet Adapter Complete Driver Pack. This could potentially allow an authenticated user to enable escalation of privilege via local access. **Recommendations** For versions prior to 29.1, update to version 29.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Intel(R) Thread Director Visualizer version 1.0.0 **Description** The issue concerns an uncontrolled search path in the Intel(R) Thread Director Visualizer software. This could potentially allow an authenticated user to enable escalation of privilege via local access. **Recommendations** For Intel(R) Thread Director Visualizer version 1.0.0, update to version 1.0.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Intel(R) ME driver pack installer engines versions prior to 2422.6.2.0 **Description** The issue is related to improper access control in some Intel(R) ME driver pack installer engines. This may allow an authenticated user to potentially enable escalation of privilege via local access. **Recommendations** For versions prior to 2422.6.2.0, update to version 2422.6.2.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Intel(R) Optane(TM) PMem Management software versions prior to CR MGMT 02.00.00.4040 Intel(R) Optane(TM) PMem Management software versions prior to CR MGMT 03.00.00.0499 **Description** A NULL pointer dereference issue in the Intel(R) Optane(TM) PMem Management software may allow an authenticated user to potentially enable denial of service via local access. **Recommendations** For versions prior to CR MGMT 02.00.00.4040, update to CR MGMT 02.00.00.4040 or later. For versions prior to CR MGMT 03.00.00.0499, update to CR MGMT 03.00.00.0499 or later.

**Name of the Vulnerable Software and Affected Versions** Intel Binary Configuration Tool versions prior to 3.4.5 **Description** The issue is related to incorrect default permissions in the Intel Binary Configuration Tool software for Windows, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could allow an attacker to elevate their privileges. **Recommendations** For versions prior to 3.4.5, update to version 3.4.5 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Intel Binary Configuration Tool versions prior to 3.4.5 **Description** The issue is related to an uncontrolled search path element in the Intel Binary Configuration Tool. Exploitation of this issue may allow an attacker to potentially enable escalation of privilege via local access. **Recommendations** For versions prior to 3.4.5, update to version 3.4.5 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Intel(R) Advanced Link Analyzer Standard Edition versions prior to 23.1.1 Description: The issue is related to incorrect execution-assigned permissions in the Intel(R) Advanced Link Analyzer Standard Edition software installer. This may allow an authenticated user to potentially enable escalation of privilege via local access. The vulnerability is associated with errors in permission assignment, which can be exploited by an attacker to elevate their privileges. Recommendations: For versions prior to 23.1.1, update to version 23.1.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Intel(R) Chipset Device Software versions prior to 10.1.19444.8378 **Description** The issue is related to an uncontrolled search path in the Intel Chipset INF Utility, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could potentially be exploited by an attacker to elevate their privileges. **Recommendations** For versions prior to 10.1.19444.8378, update to version 10.1.19444.8378 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Intel CSME versions prior to 2328.5.5.0 **Description** The issue is related to insufficient input validation in the Intel Converged Security and Manageability Engine (CSME) installer software. This could allow an authenticated user to potentially enable escalation of privilege via local access. **Recommendations** For versions prior to 2328.5.5.0, update to version 2328.5.5.0 or later to resolve the issue. As a temporary workaround, consider restricting local access to the system to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Intel(R) Ethernet tools and driver install software versions prior to 28.2 **Description** The issue is related to an improper access control element in some Intel(R) Ethernet tools and driver install software. This may allow an authenticated user to potentially enable escalation of privilege via local access. **Recommendations** For versions prior to 28.2, update to version 28.2 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Intel VROC software versions prior to 8.0.8.1001 **Description** The issue is related to incorrect default permissions in Intel VROC software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is a problem with the implementation of the RAID array creation technology based on Intel VROC chipsets, where standard permissions are used incorrectly. **Recommendations** For versions prior to 8.0.8.1001, update to version 8.0.8.1001 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Intel(R) Chipset Driver Software versions prior to 10.1.19444.8378 **Description** The issue is related to improper access control in the Intel(R) Chipset Driver Software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could potentially be exploited by an attacker to gain elevated privileges. **Recommendations** For versions prior to 10.1.19444.8378, update to version 10.1.19444.8378 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Intel VROC software versions prior to 8.0.8.1001 **Description** The issue is related to improper access control in Intel VROC software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is due to shortcomings in the implementation of RAID array technology based on Intel VROC chipsets. **Recommendations** For Intel VROC software versions prior to 8.0.8.1001, update to version 8.0.8.1001 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Intel QSFP+ Configuration Utility versions all **Description** The issue is related to an uncontrolled search path element in the Intel QSFP+ Configuration Utility software. This could potentially allow an authenticated user to escalate their privileges via local access. **Recommendations** For Intel QSFP+ Configuration Utility versions all, consider restricting local access to the utility until a patch is available. As a temporary workaround, limit the privileges of users who have access to the utility to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Intel(R) Chipset Driver Software versions prior to 10.1.19444.8378 **Description** The issue is related to incorrect default permissions in some Intel(R) Chipset Driver Software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could potentially be exploited by an attacker to gain elevated privileges. **Recommendations** For versions prior to 10.1.19444.8378, update to version 10.1.19444.8378 or later to resolve the issue. As a temporary workaround, consider restricting local access to the system to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Intel HID Event Filter drivers for Windows 10 versions prior to 2.2.2.1 **Description** The issue is related to insecure inherited permissions in some Intel HID Event Filter drivers for Windows 10, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could allow an attacker to elevate their privileges. **Recommendations** For versions prior to 2.2.2.1, update to version 2.2.2.1 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Intel NUC P14E Laptop Element versions prior to 5.4.1.4479 **Description** The issue is related to incorrect default permissions in the Intel Integrated Sensor Hub (ISH) driver, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could permit an attacker to elevate their privileges. **Recommendations** For versions prior to 5.4.1.4479, update to version 5.4.1.4479 or later to resolve the issue. As a temporary workaround, consider restricting local access to the system to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Intel(R) OFU software versions prior to 14.1.31 **Description** The issue is related to an uncontrolled search path in some Intel(R) OFU software, which may allow an authenticated user to potentially enable escalation of privilege via local access. **Recommendations** For versions prior to 14.1.31, update to version 14.1.31 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Intel Rapid Storage Technology versions prior to 16.8.5.1014.9 **Description** The issue is related to insecure inherited permissions in Intel Rapid Storage Technology, which can be exploited to potentially enable escalation of privilege via local access. This is due to errors in privilege management. An authenticated user may be able to elevate their privileges. **Recommendations** For versions prior to 16.8.5.1014.9, update to version 16.8.5.1014.9 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.