7.8

CVE-2021-0065

Incorrect default permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Ax210 Firmware Version < 22.40
   Intel ≫ Ax210 Version -
Intel ≫ Ax201 Firmware Version < 22.40
   Intel ≫ Ax201 Version -
Intel ≫ Ax200 Firmware Version < 22.40
   Intel ≫ Ax200 Version -
Intel ≫ Ac 9560 Firmware Version < 22.40
   Intel ≫ Ac 9560 Version -
Intel ≫ Ac 9462 Firmware Version < 22.40
   Intel ≫ Ac 9462 Version -
Intel ≫ Ac 9461 Firmware Version < 22.40
   Intel ≫ Ac 9461 Version -
Intel ≫ 9260 Firmware Version -
   Intel ≫ Ac 9260 Version -
Intel ≫ Ac 9260 Firmware Version < 22.40
   Intel ≫ Ac 9260 Version -
Intel ≫ Ac 8265 Firmware Version < 22.40
   Intel ≫ Ac 8265 Version -
Intel ≫ Ac 8260 Firmware Version < 22.40
   Intel ≫ Ac 8260 Version -
Intel ≫ Ac 3168 Firmware Version < 22.40
   Intel ≫ Ac 3168 Version -
Intel ≫ 7265 Firmware Version < 22.40
   Intel ≫ 7265 Version -
Intel ≫ Ac 3165 Firmware Version < 22.40
   Intel ≫ Ac 3165 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.108
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html
Vendor Advisory