CVE-2018-3667

EPSS 0.05%
Veröffentlicht 10.07.2018 21:29:01
Zuletzt bearbeitet 21.11.2024 04:05:52
Quelle secure@intel.com
CVE-Watchlists
Login
Unerledigt
Login

Installation tool IPDT (Intel Processor Diagnostic Tool) 4.1.0.24 sets permissions of installed files incorrectly, allowing for execution of arbitrary code and potential privilege escalation.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Intel ≫ Processor Diagnostic Tool Version4.1.0.24

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.05%	0.129

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

CWE-1188 Initialization of a Resource with an Insecure Default

The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00140.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-3667

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-3667

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-3667

EUVD