CVEvulnerability

CVE-2018-12131

7.8 HIGH Published 2018-10-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-10-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-732

Description

Permissions in the driver pack installers for Intel NVMe before version 4.0.0.1007 and Intel RSTe before version 4.7.0.2083 may allow an authenticated user to potentially escalate privilege via local access.

Affected configurations

• intel client nvme (< 4.0.0.1007) • intel datacenter nvme (<= 4.0.0.1006) • intel rapid storage technology (< 4.7.0.2083)

Related

Weakness · CWE (1)

  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References