PT-2025-6678 · Intel · Intel Battery Life Diagnostic Tool

Sim0Nsecurity · Published 2025-02-11 · Updated 2025-02-13 · CVE-2024-41917

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Battery Life Diagnostic Tool versions prior to 2.4.1

Description A time-of-check time-of-use race condition may allow an authenticated user to potentially enable escalation of privilege via local access. This issue affects some Intel(R) Battery Life Diagnostic Tool software.

Recommendations For versions prior to 2.4.1, update to version 2.4.1 or later to resolve the issue. As a temporary workaround, consider restricting local access to the Intel(R) Battery Life Diagnostic Tool software until the update is applied.

Fix

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

BDU:2025-02359

CVE-2024-41917

Affected Products

Intel Battery Life Diagnostic Tool

References · 5

• https://bdu.fstec.ru/vul/2025-02359 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-41917 · Security Note
• https://t.me/cvedetector/17950 · Telegram Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01230.html · Note
• https://twitter.com/CVEnew/status/1890046695225852251 · Twitter Post