6.7

CVE-2020-8765

Incorrect default permissions in the installer for the Intel(R) RealSense(TM) DCM may allow a privileged user to potentially enable escalation of privilege via local access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Realsense Depth Camera Manager Version < 1.5
   Intel ≫ Realsense Camera F200 Version -
Intel ≫ Realsense Depth Camera Manager Version < 2.2
   Intel ≫ Realsense Camera R200 Version -
Intel ≫ Realsense Depth Camera Manager Version < 3.4
   Intel ≫ Realsense Camera Sr300 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.159
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00397.html
Patch
Vendor Advisory