CVE-2024-37025

Medium

Incorrect execution-assigned permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installer before version 23.1.1…

intel·CWE-279·Published 2024-11-13

CVSS

6.7

EPSS

0.00

KEV

Exploits

cve.orgen

234 chars

Incorrect execution-assigned permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installer before version 23.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

NVDen

234 chars

NVDes

288 chars

Los permisos de ejecución asignados incorrectamente en algunos instaladores de software Intel(R) Advanced Link Analyzer Standard Edition anteriores a la versión 23.1.1 pueden permitir que un usuario autenticado habilite potencialmente la escalada de privilegios a través del acceso local.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	6.7	—	—	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
4.0	Primary	cve.org	5.4	—	—	CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
4.0	Secondary	NVD	5.4	—	—	CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X