J00Sean

يتيح التحكم الخارجي في أسماء الملفات أو مساراتها في بروتوكول NTLM (NT LAN Manager) الخاص بنظام Windows لمهاجم غير مصرح له القيام بعمليات انتحال الهوية عبر الشبكة. وقد تؤدي هذه المشكلة، التي تؤثر بشكل خاص على مكون «مستكشف الملفات»، إلى الكشف عن تجزئات NTLM. يمكن للمهاجمين استغلال هذه الثغرة عن طريق إقناع المستخدم بفك ضغط أرشيف ضار أو فتح ملفات `.library-ms` ضارة، مما يؤدي إلى قيام مستكشف Windows تلقائيًا بإرسال طلب مصادقة SMB إلى خادم SMB يسيطر عليه المهاجم. وقد سُجلت حوادث فعلية، بما في ذلك حملات تصيد احتيالي عالمية وهجمات موجهة ضد جهات حكومية في بولندا ورومانيا، والتي يُحتمل أن تكون مرتبطة بـ APT28.

تتعلق المشكلة بمسار بحث غير خاضع للرقابة في بعض تثبيتات حزمة برامج التشغيل الكاملة لمحول إيثرنت Intel(R). وقد يتيح ذلك لمستخدم معتمد رفع مستوى الامتيازات عبر الوصول المحلي.

تتعلق المشكلة بمسار بحث غير خاضع للرقابة في برنامج Intel(R) Thread Director Visualizer. وقد يتيح ذلك لمستخدم معتمد تصعيد الامتيازات عبر الوصول المحلي.

تتعلق المشكلة بعدم كفاية ضوابط الوصول في بعض آليات برنامج تثبيت حزمة برامج تشغيل Intel(R) ME. وقد يتيح ذلك لمستخدم معتمد إمكانية تصعيد الامتيازات عبر الوصول المحلي.

A NULL pointer dereference issue in the Intel(R) Optane(TM) PMem Management software may allow an authenticated user to potentially enable denial of service via local access.

The issue is related to incorrect default permissions in the Intel Binary Configuration Tool software for Windows, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could allow an attacker to elevate their privileges.

The issue is related to an uncontrolled search path element in the Intel Binary Configuration Tool. Exploitation of this issue may allow an attacker to potentially enable escalation of privilege via local access.

Name of the Vulnerable Software and Affected Versions: Intel(R) Advanced Link Analyzer Standard Edition versions prior to 23.1.1 Description: The issue is related to incorrect execution-assigned permissions in the Intel(R) Advanced Link Analyzer Standard Edition software installer. This may allow an authenticated user to potentially enable escalation of privilege via local access. The vulnerability is associated with errors in permission assignment, which can be exploited by an attacker to elevate their privileges. Recommendations: For versions prior to 23.1.1, update to version 23.1.1 or later to resolve the issue.

The issue is related to an uncontrolled search path in the Intel Chipset INF Utility, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could potentially be exploited by an attacker to elevate their privileges.

The issue is related to insufficient input validation in the Intel Converged Security and Manageability Engine (CSME) installer software. This could allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to an improper access control element in some Intel(R) Ethernet tools and driver install software. This may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to incorrect default permissions in Intel VROC software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is a problem with the implementation of the RAID array creation technology based on Intel VROC chipsets, where standard permissions are used incorrectly.

The issue is related to improper access control in the Intel(R) Chipset Driver Software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could potentially be exploited by an attacker to gain elevated privileges.

The issue is related to improper access control in Intel VROC software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is due to shortcomings in the implementation of RAID array technology based on Intel VROC chipsets.

The issue is related to an uncontrolled search path element in the Intel QSFP+ Configuration Utility software. This could potentially allow an authenticated user to escalate their privileges via local access.

The issue is related to incorrect default permissions in some Intel(R) Chipset Driver Software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could potentially be exploited by an attacker to gain elevated privileges.

The issue is related to insecure inherited permissions in some Intel HID Event Filter drivers for Windows 10, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could allow an attacker to elevate their privileges.

The issue is related to incorrect default permissions in the Intel Integrated Sensor Hub (ISH) driver, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could permit an attacker to elevate their privileges.

The issue is related to an uncontrolled search path in some Intel(R) OFU software, which may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to insecure inherited permissions in Intel Rapid Storage Technology, which can be exploited to potentially enable escalation of privilege via local access. This is due to errors in privilege management. An authenticated user may be able to elevate their privileges.