CVEvulnerability

CVE-2018-12160

5.3 MEDIUM Published 2018-09-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-09-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.3 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-276, CWE-427

Description

DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access.

Affected configurations

• intel data migration software (<= 3.1)

Related

Weakness · CWE (2)

  • CWE-276 Incorrect Default Permissions weakness
  • CWE-427 Uncontrolled Search Path Element weakness

References