Uncontrolled Search Path Vulnerability in Intel Simics Package Manager
CVE-2024-26027

7.8HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Simics Package Manager Software
Vendor
CVE Published:
14 August 2024

What is CVE-2024-26027?

The vulnerability in Intel Simics Package Manager could allow an authenticated user to exploit an uncontrolled search path, leading to potential privilege escalation through local access. This could enable unauthorized activities within the system, posing significant security risks. Users of the affected versions are encouraged to update their software to ensure that protective measures are in place.

Affected Version(s)

Intel(R) Simics Package Manager software before version 1.8.3

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2024-26027 : Uncontrolled Search Path Vulnerability in Intel Simics Package Manager