What is CVE-2020-0598?

CVE-2020-0598 is a high-severity vulnerability in Intel Binary_configuration_tool, classified under Untrusted Search Path. CVSS score: 7.8/10. Published 2020-04-15.

How severe is CVE-2020-0598?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Intel Binary_configuration_tool

CVE-2020-0598

Uncontrolled search path in the installer for the Intel(R) Binary Configuration Tool for Windows, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access.

EPSS: 0.003 (26.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Intel Binary_configuration_tool
N/a Intel(r) Binary Configuration Tool For Windows — versions See provided reference

Weakness classification (CWE)

CWE-426 — Untrusted Search Path

References

secure@intel.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-0598?: CVE-2020-0598 is a high-severity vulnerability in Intel Binary_configuration_tool, classified under Untrusted Search Path. CVSS score: 7.8/10. Published 2020-04-15.
How severe is CVE-2020-0598?: High severity. CVSS v3 base score is 7.8 out of 10.