Intel Dynamic Platform and Thermal Framework CVE-2019-0134 Local Privilege Escalation Vulnerability

Description

Intel Dynamic Platform and Thermal Framework is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Intel Dynamic Platform and Thermal Framework version 8.3.10208.5643 and prior are vulnerable.

Technologies Affected

• Intel Dynamic Platform and Thermal Framework 8.2.11003.3588
• Intel Dynamic Platform and Thermal Framework 8.3.10203.4295
• Intel Dynamic Platform and Thermal Framework 8.3.10207.5567
• Intel Dynamic Platform and Thermal Framework 8.3.10208.5643

Recommendations

Permit local access for trusted individuals only. Where possible, use restricted environments and restricted shells.
Allow only trusted and accountable individuals to have local interactive access to the vulnerable computer.

Updates are available. Please see the references or vendor advisory for more information.