PT-2024-8685

CVE-2024-25647

Published

2024-11-12

Updated

2024-11-15

Description by

CVSS 3.1

6.7

Medium

MetricsAV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Binary Configuration Tool versions prior to 3.4.5

Description The issue is related to incorrect default permissions in the Intel Binary Configuration Tool software for Windows, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could allow an attacker to elevate their privileges.

Recommendations For versions prior to 3.4.5, update to version 3.4.5 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

J00Sean

Vendors

Affected products

Weakness enumeration

CWE-276: Incorrect Default Permissions

Related identifiers

CVE-2024-25647