PT-2019-1750 · Intel · Intel Usb 3.0 Creator Utility

Published 2019-03-12 · Updated 2019-03-15 · CVE-2019-0129

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Intel USB 3.0 Creator Utility versions all

Description The issue is related to insufficient access control in the Intel USB 3.0 Creator Utility, which may allow an authenticated user to potentially enable escalation of privilege via local access.

Recommendations For Intel USB 3.0 Creator Utility versions all, consider restricting local access to the utility until a fix is available. As a temporary workaround, review and adjust the permissions settings to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2019-01389

CVE-2019-0129

Affected Products

Intel Usb 3.0 Creator Utility

References · 4

• https://intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00229.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0129 · Security Note
• https://bdu.fstec.ru/vul/2019-01389 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00229.html · Note