CVE-2024-25647 in Binary Configuration Tool Software

Sumário

de MITRE • 13/11/2024

Incorrect default permissions for some Intel(R) Binary Configuration Tool software for Windows before version 3.4.5 may allow an authenticated user to potentially enable escalation of privilege via local access.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsável: Intel
• Reservar: 10/04/2024
• Divulgação: 13/11/2024
• Moderação: aceite
• Entrada: VDB-284421
• CPE: pronto
• CWE: CWE-276 (confirmado)
• CVSS: 6.7 (CNA)
• EPSS: 0.00144
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-25647
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-25647
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-25647/