PT-2018-2696

CVE-2018-3635

·

Publicado

2018-11-14

·

Atualizado

2021-03-26

Descrição por

CVSS 3.1
7.8
Alta
MétricasAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Intel Rapid Store Technology (RST) versions prior to 16.7
Description The issue is related to insufficient input validation in the installer, which may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access. This could lead to arbitrary code execution with escalation of privilege via the Intel Rapid Storage Technology User Interface and Driver.
Recommendations For versions prior to 16.7, update to version 16.7 or later to resolve the issue. As a temporary workaround, consider restricting local access to the installer to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾