7.8high
CVE-2018-3703
Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated us…
Published 7 y ago · modified 4 mo ago · JSON
CVSS
7.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 20%
Public exploits
0
none known
Summary
Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access.
Exploit prediction (EPSS)
0.28% probability of exploitation in the next 30 days, higher than 20% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 7.8 | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Affected products
- Intel Corporation Intel(R) SSD Data Center Tool for Windows
Classification
- Weakness
- CWE-732 Incorrect Permission Assignment for Critical Resource
References
- intel.com /content/www/us/en/security-center/advisory/INTEL-SA-00207.html · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2018-3703
- NVD: CVE-2018-3703
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.