Vulnerability in Intel Ssd Data Center Tool
CVE-2018-3703
Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access.
EPSS: 0.003 (19.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Intel Ssd_data_center_tool
- Intel Corporation Intel(r) Ssd Data Center Tool For Windows — versions before v3.0.17.
- Microsoft Windows
Weakness classification (CWE)
References
- secure@intel.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2018-3703?
- CVE-2018-3703 is a high-severity vulnerability in Intel Ssd Data Center Tool, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.8/10. Published 2019-01-10.
- How severe is CVE-2018-3703?
- High severity. CVSS v3 base score is 7.8 out of 10.