PT-2018-16117 · Intel · Intel Processor Diagnostic Tool

Published 2018-07-10 · Updated 2019-10-03 · CVE-2018-3667

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Processor Diagnostic Tool version 4.1.0.24

Description The issue concerns the installation tool IPDT, which sets permissions of installed files incorrectly. This incorrect setting allows for the execution of arbitrary code and potential privilege escalation.

Recommendations For Intel Processor Diagnostic Tool version 4.1.0.24, update the installation to correctly set permissions of installed files to prevent arbitrary code execution and potential privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2018-3667

Affected Products

Intel Processor Diagnostic Tool

References · 3

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00140.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-3667 · Security Note
• https://osv.dev/vulnerability/CVE-2018-3667 · Vendor Advisory