PT-2026-7286 · Intel · Intel Optane Pmem Management

Published 2026-02-10 · Updated 2026-02-10 · CVE-2025-22849

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Optane(TM) PMem management software versions CR MGMT 01.00.00.3584, CR MGMT 02.00.00.4052, CR MGMT 03.00.00.0538

Description The software has default permissions that may allow a privilege escalation. An unprivileged software adversary with an authenticated user and a high complexity attack may be able to escalate privileges. This may occur via local access with active user interaction. The potential impacts to the system include confidentiality, integrity, and availability.

Recommendations Update to version CR MGMT 01.00.00.3584 or later. Update to version CR MGMT 02.00.00.4052 or later. Update to version CR MGMT 03.00.00.0538 or later.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2025-22849

Affected Products

Intel Optane Pmem Management

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-22849 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01323.html · Note
• https://twitter.com/CVEnew/status/2021279091324797206 · Twitter Post