PT-2019-5582 · Intel · Intel(R) Rst

Marius Gabriel Mihai · Published 2019-12-16 · Updated 2020-10-12 · CVE-2019-14568

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) RST versions prior to 17.7.0.1006

Description The issue is related to improper permissions in the executable for Intel(R) RST, which may allow an authenticated user to potentially enable escalation of privilege via local access. This vulnerability is associated with errors in using standard permissions, potentially allowing an attacker to elevate their privileges. It can also enable the execution of privileged processes and potentially bypass antivirus blacklists.

Recommendations For versions prior to 17.7.0.1006, update to version 17.7.0.1006 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable executable to minimize the risk of exploitation.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

BDU:2020-04414

CVE-2019-14568

Affected Products

Intel(R) Rst

References · 6

• https://osv.dev/vulnerability/CVE-2019-14568 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14568 · Security Note
• https://bdu.fstec.ru/vul/2020-04414 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00324.html · Vendor Advisory
• https://support.f5.com/csp/article/K38424406?utm_source=f5support&amp%3Butm_medium=RSS · Note
• https://t.me/sysadm_in_channel/1351 · Telegram Post