CVEvulnerability
CVE-2020-12354
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-11-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-276
Description
Incorrect default permissions in Windows(R) installer in Intel(R) AMT SDK versions before 14.0.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected configurations
• intel active management technology software development kit (< 14.0.0.1)
Related
Weakness · CWE (1)
- CWE-276 Incorrect Default Permissions weakness
References
- https://security.netapp.com/advisory/ntap-20201113-0003/ Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 Vendor Advisory
- https://security.netapp.com/advisory/ntap-20201113-0003/ Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 Vendor Advisory