MEDIUM✓ PATCH🇬🇧 English

CVE-2025-20079

CVSS 5.4v4.0pub. 2025-05-13upd. 2025-09-02

Uncontrolled search path for some Intel(R) Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access.

oryginał EN
CVSS Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Intel Advisor

    APP
    Intel
    < 2024.2

  • Intel Oneapi Base Toolkit

    APP
    Intel
    < 2024.2
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Referencje

Powiązane podatności

CVE-2023-35121HIGH7.8ten sam produkt

Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for some Intel(R) on...

CVE-2023-24592HIGH7.3ten sam produkt

Path traversal in the some Intel(R) oneAPI Toolkits and Component software before version 2023.1 may allow aut...

CVE-2023-30763HIGH7.2ten sam produkt

Heap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privileged user to ...

CVE-2022-21128HIGH7.8ten sam produkt

Insufficient control flow management in the Intel(R) Advisor software before version 7.6.0.37 may allow an aut...

CVE-2021-33129HIGH7.8ten sam produkt

Incorrect default permissions in the software installer for the Intel(R) Advisor before version 2021.4.0 may a...