CVE-2018-12177

Опубликовано: 10 янв. 2019

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.0.7 may allow an authorized user to potentially enable escalation of privilege via local access.

Ссылки

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00182.html
Patch
Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00182.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:intel:proset\/wireless_software:*:*:*:*:*:*:*:*

Версия до 20.90.0.7 (исключая)

Одно из

cpe:2.3:h:intel:dual_band_wireless-ac_3160:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:dual_band_wireless-ac_3165:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:dual_band_wireless-ac_3168:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:dual_band_wireless-ac_7260:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:dual_band_wireless-ac_7260_for_desktop:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:dual_band_wireless-ac_7265\(rev_c\):-:*:*:*:*:*:*:*

cpe:2.3:h:intel:dual_band_wireless-ac_7265_\(rev_d\):-:*:*:*:*:*:*:*

cpe:2.3:h:intel:dual_band_wireless-ac_8260:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:dual_band_wireless-ac_8265:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:dual_band_wireless-ac_8265_desktop_kit:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:dual_band_wireless-n_7260:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:dual_band_wireless-n_7265_\(rev_c\):-:*:*:*:*:*:*:*

cpe:2.3:h:intel:dual_band_wireless-n_7265_\(rev_d\):-:*:*:*:*:*:*:*

cpe:2.3:h:intel:tri-band_wireless-ac_17265:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:tri-band_wireless-ac_18260:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:tri-band_wireless-ac_18265:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:wireless-ac_9260:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:wireless-ac_9461:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:wireless-ac_9462:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:wireless-ac_9560:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:wireless-n_7260:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:wireless-n_7265_\(rev_c\):-:*:*:*:*:*:*:*

cpe:2.3:h:intel:wireless-n_7265_\(rev_d\):-:*:*:*:*:*:*:*

EPSS

Процентиль: 11%

0.00037

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-732

Связанные уязвимости

GHSA-pvwr-rx22-jp4j