J00Sean

External control of file names or paths in the Windows NTLM (NT LAN Manager) protocol allows an unauthorized attacker to perform spoofing over a network. This issue, specifically affecting the File Explorer component, can lead to the disclosure of NTLM hashes. Attackers can exploit this by convincing a user to unpack a malicious archive or open malicious `.library-ms` files, which triggers Windows Explorer to automatically initiate an SMB authentication request to an attacker-controlled SMB server. Real-world incidents have been recorded, including global phishing campaigns and targeted attacks against government entities in Poland and Romania, potentially linked to APT28.

The issue is related to an uncontrolled search path in some installations of the Intel(R) Ethernet Adapter Complete Driver Pack. This could potentially allow an authenticated user to enable escalation of privilege via local access.

The issue concerns an uncontrolled search path in the Intel(R) Thread Director Visualizer software. This could potentially allow an authenticated user to enable escalation of privilege via local access.

The issue is related to improper access control in some Intel(R) ME driver pack installer engines. This may allow an authenticated user to potentially enable escalation of privilege via local access.

A NULL pointer dereference issue in the Intel(R) Optane(TM) PMem Management software may allow an authenticated user to potentially enable denial of service via local access.

The issue is related to incorrect default permissions in the Intel Binary Configuration Tool software for Windows, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could allow an attacker to elevate their privileges.

The issue is related to an uncontrolled search path element in the Intel Binary Configuration Tool. Exploitation of this issue may allow an attacker to potentially enable escalation of privilege via local access.

Name of the Vulnerable Software and Affected Versions: Intel(R) Advanced Link Analyzer Standard Edition versions prior to 23.1.1 Description: The issue is related to incorrect execution-assigned permissions in the Intel(R) Advanced Link Analyzer Standard Edition software installer. This may allow an authenticated user to potentially enable escalation of privilege via local access. The vulnerability is associated with errors in permission assignment, which can be exploited by an attacker to elevate their privileges. Recommendations: For versions prior to 23.1.1, update to version 23.1.1 or later to resolve the issue.

The issue is related to an uncontrolled search path in the Intel Chipset INF Utility, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could potentially be exploited by an attacker to elevate their privileges.

The issue is related to insufficient input validation in the Intel Converged Security and Manageability Engine (CSME) installer software. This could allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to an improper access control element in some Intel(R) Ethernet tools and driver install software. This may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to incorrect default permissions in Intel VROC software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is a problem with the implementation of the RAID array creation technology based on Intel VROC chipsets, where standard permissions are used incorrectly.

The issue is related to improper access control in the Intel(R) Chipset Driver Software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could potentially be exploited by an attacker to gain elevated privileges.

The issue is related to improper access control in Intel VROC software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is due to shortcomings in the implementation of RAID array technology based on Intel VROC chipsets.

The issue is related to an uncontrolled search path element in the Intel QSFP+ Configuration Utility software. This could potentially allow an authenticated user to escalate their privileges via local access.

The issue is related to incorrect default permissions in some Intel(R) Chipset Driver Software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could potentially be exploited by an attacker to gain elevated privileges.

The issue is related to insecure inherited permissions in some Intel HID Event Filter drivers for Windows 10, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could allow an attacker to elevate their privileges.

The issue is related to incorrect default permissions in the Intel Integrated Sensor Hub (ISH) driver, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could permit an attacker to elevate their privileges.

The issue is related to an uncontrolled search path in some Intel(R) OFU software, which may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to insecure inherited permissions in Intel Rapid Storage Technology, which can be exploited to potentially enable escalation of privilege via local access. This is due to errors in privilege management. An authenticated user may be able to elevate their privileges.