PT-2020-1645 · Intel · Intel Chipset Device Software Inf Utility

Published 2020-01-14 · Updated 2020-08-24 · CVE-2019-14596

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Chipset Device Software INF Utility versions prior to 10.1.18

Description The issue is related to improper access control in the installer, which may allow an authenticated user to potentially enable denial of service via local access. The vulnerability is associated with deficiencies in the authorization mechanism, and its exploitation can lead to a denial of service.

Recommendations For versions prior to 10.1.18, update to version 10.1.18 or later to resolve the issue.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2020-00874

CVE-2019-14596

Affected Products

Intel Chipset Device Software Inf Utility

References · 4

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00306.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00874 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-14596 · Security Note
• https://osv.dev/vulnerability/CVE-2019-14596 · Vendor Advisory