PT-2018-11033 · Intel · Intel Driver & Support Assistant

Published 2018-09-12 · Updated 2019-10-03 · CVE-2018-12148

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Driver and Support Assistant versions prior to 3.5.0.1

Description The issue concerns a privilege escalation in file permissions, potentially allowing an authenticated user to execute code as an administrator via local access.

Recommendations For versions prior to 3.5.0.1, update to version 3.5.0.1 or later to resolve the issue.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2018-12148

Affected Products

Intel Driver & Support Assistant

References · 3

• https://osv.dev/vulnerability/CVE-2018-12148 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00165.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-12148 · Security Note