Insecure Inherited Permissions in Intel XTU Software
CVE-2024-21835

7.8HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Xtu Software
Vendor
CVE Published:
16 May 2024

What is CVE-2024-21835?

The Intel XTU software, prior to version 7.14.0.15, contains a vulnerability related to insecure inherited permissions. This flaw may allow authenticated users to exploit the system, potentially leading to escalated privileges through local access. Proper safeguards and updates are essential to mitigate this issue.

Affected Version(s)

Intel(R) XTU software before version 7.14.0.15

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.