CVE-2019-0164

Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access.

Score

CVSS 3.1 7.3 High

Status

Modified - secure@intel.com

Published

2019-06-13

Last modified

2024-08-04

Weaknesses

CWE-264

Affected products

• Turbo Boost Max Technology 3.0 (Intel)
• Thinkstation P410 Firmware (Lenovo)
• Thinkstation P510 Firmware (Lenovo)
• Thinkstation P710 Firmware (Lenovo)
• Thinkstation P910 Firmware (Lenovo)

References

• http://www.securityfocus.com/bid/108770
• https://support.lenovo.com/us/en/product_security/LEN-27841
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00243.html