Race Condition Vulnerability in Intel Battery Life Diagnostic Tool
CVE-2024-41917
5.4MEDIUM
Key Information:
- Vendor
- Intel
- Vendor
- CVE Published:
- 12 February 2025
Summary
The Intel Battery Life Diagnostic Tool software prior to version 2.4.1 is susceptible to a race condition vulnerability. This flaw occurs due to a timing issue between when a check is made and when the result is used, allowing an authenticated user, with local access, to potentially escalate their privileges. Attackers may exploit this vulnerability to gain unauthorized access or control over sensitive parts of the system, emphasizing the need for immediate software updates to mitigate risks.
Affected Version(s)
Intel(R) Battery Life Diagnostic Tool software before version 2.4.1
References
CVSS V4
Score:
5.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
Vulnerability published
Vulnerability Reserved