CVE-2018-12177

Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.0.7 may allow an authorized user to potentially enable escalation of privilege via local access.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
intelCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 10%
VendorProductVersion
intelproset\/wireless_software
𝑥
< 20.90.0.7
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00182.html
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00182.html