CVE-2024-25647 in Binary Configuration Tool Software

Riassunto

di MITRE • 13/11/2024

Incorrect default permissions for some Intel(R) Binary Configuration Tool software for Windows before version 3.4.5 may allow an authenticated user to potentially enable escalation of privilege via local access.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsabile: Intel
• Prenotare: 10/04/2024
• Divulgazione: 13/11/2024
• Moderazione: accettato
• Voce: VDB-284421
• CPE: pronto
• CWE: CWE-276 (confermato)
• CVSS: 6.7 (CNA)
• EPSS: 0.00144
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-25647
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-25647
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-25647/