Design/Logic Flaw

2018-10-1014:29:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

Permissions in the driver pack installers for Intel NVMe before version 4.0.0.1007 and Intel RSTe before version 4.7.0.2083 may allow an authenticated user to potentially escalate privilege via local access.

CPENameOperatorVersion
client_nvmelt4.0.0.1007
datacenter_nvmele4.0.0.1006
rapid_storage_technologylt4.7.0.2083

Name	Operator	Version
client_nvme	lt	4.0.0.1007
datacenter_nvme	le	4.0.0.1006
rapid_storage_technology	lt	4.7.0.2083

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00154.html