HIGH✓ PATCH🇬🇧 English

CVE-2020-12346

CVSS 7.8v3.1pub. 2020-11-12upd. 2024-11-21

Improper permissions in the installer for the Intel(R) Battery Life Diagnostic Tool before version 1.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.

oryginał EN

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Intel Battery Life Diagnostic Tool
APP
Intel
< 1.0.7

🟢

PATCH DOSTĘPNY

Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.

CWE

CWE-276

Referencje

www.intel.com/content/www/us/en/security-center/advisor…

Powiązane podatności

CVE-2023-30763HIGH7.2ten sam produkt

Heap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privileged user to ...

CVE-2022-36278HIGH8.2ten sam produkt

Insufficient control flow management in the Intel(R) Battery Life Diagnostic Tool software before version 2.2....

CVE-2022-34153HIGH8.2ten sam produkt

Improper initialization in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allow a...

CVE-2023-35060MEDIUM6.7ten sam produkt

Uncontrolled search path in some Intel(R) Battery Life Diagnostic Tool software before version 2.3.1 may allow...

CVE-2022-38786MEDIUM6.7ten sam produkt

Improper access control in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may allow an ...