PT-2018-2696

CVE-2018-3635

·

Published

2018-11-14

·

Updated

2021-03-26

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Intel Rapid Store Technology (RST) versions prior to 16.7
Description The issue is related to insufficient input validation in the installer, which may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access. This could lead to arbitrary code execution with escalation of privilege via the Intel Rapid Storage Technology User Interface and Driver.
Recommendations For versions prior to 16.7, update to version 16.7 or later to resolve the issue. As a temporary workaround, consider restricting local access to the installer to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾