PT-2018-11042 · Intel · Intel Openvino Toolkit

Published 2018-09-12 · Updated 2019-10-03 · CVE-2018-12162

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel OpenVINO Toolkit for Windows versions prior to 2018.1.265

Description The issue concerns directory permissions in the Intel OpenVINO Toolkit for Windows, which may allow an authenticated user to potentially execute code using default directory permissions via local access.

Recommendations For versions prior to 2018.1.265, update to version 2018.1.265 or later to resolve the issue.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2018-12162

Affected Products

Intel Openvino Toolkit

References · 3

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00172.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-12162 · Security Note
• https://osv.dev/vulnerability/CVE-2018-12162 · Vendor Advisory