Uncontrolled Search Path Vulnerability in Intel Processor Diagnostic Tool Software
CVE-2024-21831

6.7MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Processor Diagnostic Tool Software
Vendor
CVE Published:
16 May 2024

What is CVE-2024-21831?

The Intel Processor Diagnostic Tool contains an uncontrolled search path vulnerability that could allow an authenticated user to exploit local access to potentially escalate privileges. This issue arises in versions prior to 4.1.9.41, allowing potential risks if unpatched. Users are encouraged to upgrade to the latest version to mitigate this vulnerability.

Affected Version(s)

Intel(R) Processor Diagnostic Tool software before version 4.1.9.41

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.