Vulnerability in Intel Advisor
CVE-2017-5682
Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library, and Intel Threading Building Blocks before 2017 Update 2 allows an attacker to launch a process with escalated privileges.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.010 (60.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 61st percentile — 60.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.010 · newest: 0.010 · change: 0.000
Affected products
- Intel Advisor — versions 2017
- Intel Cryptography For Integrated Performance Primitives — versions 2017
- Intel Data Analytics Acceleration Library — versions 2017
- Intel Inspector — versions 2017
- Intel Integrated Performance Primitives — versions 2017
- Intel Math Kernel Library — versions 2017
- Intel Mpi Library — versions 2017
- Intel Parallel Studio Xe — versions 2017
- Intel System Studio — versions 2017
- Intel Threading Building Blocks — versions 2017
References
- security-center.intel.com/advisory.aspx (Vendor Advisory)
- www.securityfocus.com/bid/96482 (VDB Entry, Third Party Advisory, vdb-entry)
Frequently asked questions
- What is CVE-2017-5682?
- CVE-2017-5682 is a high-severity vulnerability in Intel Advisor. CVSS score: 7.3/10. Published 2017-02-28.
- How severe is CVE-2017-5682?
- High severity. CVSS v3 base score is 7.3 out of 10.