PT-2019-2465 · Ite Tech · Ite Tech Consumer Infrared Driver

CVE-2018-3702

·

Publicado

2019-06-11

·

Atualizado

2023-03-04

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ITE Tech Consumer Infrared Driver versions prior to 5.4.3.0
Description The issue is related to improper permissions in the installer, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is due to errors in privilege management.
Recommendations For versions prior to 5.4.3.0, update to version 5.4.3.0 or later to resolve the issue.

Correção

Incorrect Permission

Improper Privilege Management

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-732CWE-269

Identificadores relacionados

BDU:2019-02243
CVE-2018-3702

Produtos afetados

Ite Tech Consumer Infrared Driver