Lucene search

K
zdiAnonymousZDI-18-279
HistoryApr 09, 2018 - 12:00 a.m.

Intel Security True Key SecureExecute Privilege Escalation Vulnerability

2018-04-0900:00:00
Anonymous
www.zerodayinitiative.com
10

0.001 Low

EPSS

Percentile

40.7%

This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Intel Security True Key. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the TrueKey service, which listens on TCP port 30000 by default. A crafted message to the SecureExecute method can trigger it to launch insecure binaries. An attacker can leverage this vulnerability to escalate privilege to SYSTEM.

0.001 Low

EPSS

Percentile

40.7%