CVEvulnerability
CVE-2018-3635
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-11-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-269
Description
Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access.
Affected configurations
• intel rapid storage technology (< 16.7)
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- http://seclists.org/fulldisclosure/2021/Mar/55 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/105984 Third Party Advisory, VDB Entry
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00153.html Vendor Advisory
- http://seclists.org/fulldisclosure/2021/Mar/55 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/105984 Third Party Advisory, VDB Entry
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00153.html Vendor Advisory