PT-2020-1576 · Intel · Intel Raid Web Console 2+1

Published 2020-01-14 · Updated 2020-01-24 · CVE-2019-14601

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Raid Web Console 2 (affected versions not specified) Intel RWC 3 for Windows versions prior to 7.010.009.000

Description The issue is related to improper permissions in the installer, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could permit an attacker to elevate their privileges.

Recommendations For Intel RWC 3 for Windows versions prior to 7.010.009.000, update to version 7.010.009.000 or later to resolve the issue. For Intel Raid Web Console 2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

BDU:2020-00617

CVE-2019-14601

Affected Products

Intel(R) Rwc3 For Windows

Intel Raid Web Console 2

References · 4

• https://bdu.fstec.ru/vul/2020-00617 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-14601 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00308.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-14601 · Vendor Advisory