vulnwire
7.8high

CVE-2018-3635

Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to pote…

Published 7 y ago · modified 4 mo ago · JSON

CVSS
7.8
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 33%
Public exploits
0
none known

Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access.

Exploit prediction (EPSS)

0.38% probability of exploitation in the next 30 days, higher than 33% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.17.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD2.04.6AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected products

  • Intel Corporation Intel Rapid Store Technology

Classification

Weakness
  • CWE-269 Improper Privilege Management

References

  • securityfocus.com /bid/105984 · vdb-entry, x_refsource_BID, x_transferred
  • intel.com /content/www/us/en/security-center/advisory/INTEL-SA-00153.html · x_refsource_CONFIRM, x_transferred
  • seclists.org /fulldisclosure/2021/Mar/55 · mailing-list, x_refsource_FULLDISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.