PT-2024-8819 · Intel · Intel Cip

·

CVE-2024-36276

·

Published

2024-11-12

·

Updated

2024-11-15

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Intel(R) CIP software versions prior to 2.4.10852
Description: The issue is related to insecure inherited permissions in Intel(R) CIP software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is due to insufficient access control mechanisms.
Recommendations: For versions prior to 2.4.10852, update to version 2.4.10852 or later to resolve the issue. As a temporary workaround, consider restricting local access to the Intel(R) CIP software to minimize the risk of exploitation.

Fix

Incorrect Permission

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2024-10451
CVE-2024-36276

Affected Products

Intel Cip