Intel PROSet Wireless WiFi Software up to 21.39 Directory Permission default permission

Summaryinfo

A vulnerability labeled as problematic has been found in Intel PROSet Wireless WiFi Software up to 21.39. This vulnerability affects unknown code of the component Directory Permission. Such manipulation leads to default permission. This vulnerability is referenced as CVE-2019-11154. The attack can only be performed from a local environment. No exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in Intel PROSet Wireless WiFi Software up to 21.39 (Wireless LAN Software). It has been rated as problematic. Affected by this issue is an unknown part of the component Directory Permission. The manipulation with an unknown input leads to a default permission vulnerability. Using CWE to declare the problem leads to CWE-276. During installation, installed file permissions are set to allow anyone to modify those files. Impacted is confidentiality. CVE summarizes:

Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable denial of service and information disclosure via local access.

The weakness was published 11/14/2019. This vulnerability is handled as CVE-2019-11154 since 04/11/2019. Local access is required to approach this attack. A simple authentication is necessary for exploitation. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1222 by the MITRE ATT&CK project.

Upgrading to version 21.40 eliminates this vulnerability.

Similar entries are available at VDB-145612, VDB-145611 and VDB-145609. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Wireless LAN Software

Vendor

• Intel

Name

• PROSet Wireless WiFi Software

Version

• 21.0
• 21.1
• 21.2
• 21.3
• 21.4
• 21.5
• 21.6
• 21.7
• 21.8
• 21.9
• 21.10
• 21.11
• 21.12
• 21.13
• 21.14
• 21.15
• 21.16
• 21.17
• 21.18
• 21.19
• 21.20
• 21.21
• 21.22
• 21.23
• 21.24
• 21.25
• 21.26
• 21.27
• 21.28
• 21.29
• 21.30
• 21.31
• 21.32
• 21.33
• 21.34
• 21.35
• 21.36
• 21.37
• 21.38
• 21.39

License

• commercial

Website

• Vendor: https://www.intel.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion