CVE-2020-0559

HIGH

7.8

Description

Insecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8.1 before version 21.40.5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE Details

CVSS v3.1 Score7.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published8/13/2020

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

intel:ac_3165_firmwareintel:ac_3168_firmwareintel:ac_7265_firmwareintel:ac_8260_firmwareintel:ac_8265_firmwareintel:ac_9260_firmwareintel:ac_9461_firmwareintel:ac_9462_firmwareintel:ac_9560_firmwareintel:atom_x5-e3930intel:atom_x5-e3940intel:atom_x7-e3950intel:ax200_firmwareintel:ax201_firmwareintel:celeron_j1750intel:celeron_j1800intel:celeron_j1850intel:celeron_j1900intel:celeron_j3060intel:celeron_j3160intel:celeron_j3355intel:celeron_j3355eintel:celeron_j3455intel:celeron_j3455eintel:celeron_j4005intel:celeron_j4025intel:celeron_j4105intel:celeron_j4125intel:celeron_j6412intel:celeron_j6413intel:celeron_n2805intel:celeron_n2806intel:celeron_n2807intel:celeron_n2808intel:celeron_n2810intel:celeron_n2815intel:celeron_n2820intel:celeron_n2830intel:celeron_n2840intel:celeron_n2910intel:celeron_n2920intel:celeron_n2930intel:celeron_n2940intel:celeron_n3000intel:celeron_n3010intel:celeron_n3050intel:celeron_n3060intel:celeron_n3150intel:celeron_n3160intel:celeron_n3350intel:celeron_n3350eintel:celeron_n3450intel:celeron_n4000intel:celeron_n4020intel:celeron_n4100intel:celeron_n4120intel:celeron_n4500intel:celeron_n4505intel:celeron_n5100intel:celeron_n5105intel:celeron_n6210intel:celeron_n6211intel:pentium_j2850intel:pentium_j2900intel:pentium_j3710intel:pentium_j4205intel:pentium_j6426intel:pentium_n3510intel:pentium_n3520intel:pentium_n3530intel:pentium_n3540intel:pentium_n3700intel:pentium_n3710intel:pentium_n4200intel:pentium_n4200eintel:pentium_n6415microsoft:windows_7microsoft:windows_8.1

Weaknesses (CWE)

CWE-732

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00355.html(secure@intel.com)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00360.html(secure@intel.com)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00355.html(af854a3a-2127-422b-91ae-364da2661108)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00360.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.