PT-2019-9554 · Intel · Intel Sgx Platform Software For Windows

Published 2019-01-10 · Updated 2019-10-03 · CVE-2018-18098

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) SGX SDK and Platform Software for Windows versions prior to 2.2.100

Description The issue is related to improper file verification in the install routine, which may allow an escalation of privilege via local access.

Recommendations For versions prior to 2.2.100, update to version 2.2.100 or later to resolve the issue.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2018-18098

Affected Products

Intel Sgx Platform Software For Windows

References · 3

• https://osv.dev/vulnerability/CVE-2018-18098 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00203.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-18098 · Security Note