Lucene search

K
nvd[email protected]NVD:CVE-2024-26027
HistoryAug 14, 2024 - 2:15 p.m.

CVE-2024-26027

2024-08-1414:15:24
CWE-427
web.nvd.nist.gov
2
cve-2024-26027
intel simics package manager
uncontrolled search path
privilege escalation

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

9.5%

Uncontrolled search path for some Intel® Simics Package Manager software before version 1.8.3 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

Nvd
Node
intelsimics_package_managerRange<1.8.3
VendorProductVersionCPE
intelsimics_package_manager*cpe:2.3:a:intel:simics_package_manager:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

9.5%

Related for NVD:CVE-2024-26027