CVE-2018-12131
Permissions in the driver pack installers for Intel NVMe before version 4.0.0.1007 and Intel RSTe before version 4.7.0.2083 may allow an authenticated user to potentially escalate privilege via local access.
- Score
- CVSS 3.0 7.8 High
- Status
- Modified - secure@intel.com
- Published
- 2018-10-10
- Last modified
- 2024-09-17
- Weaknesses
- CWE-732
Affected products
- Client Nvme (Intel)
- Datacenter Nvme (Intel)
- Rapid Storage Technology (Intel)
- Intel Nvme And Intel Rste (Intel Corporation)
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00154.html