PT-2023-12989 · Intel · Intel Csme Software Installer
CVE-2022-29871
·
Publicado
2023-08-10
·
Atualizado
2024-10-17
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Intel(R) CSME software installer versions prior to 2239.3.7.0
Description
The issue is related to improper access control in the Intel(R) CSME software installer, which may allow an authenticated user to potentially enable escalation of privilege via local access.
Recommendations
For versions prior to 2239.3.7.0, update to version 2239.3.7.0 or later to resolve the issue.
Correção
Improper Access Control
Incorrect Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Intel Csme Software Installer