CVE-2019-0128

Improper permissions in the installer for Intel(R) Chipset Device Software (INF Update Utility) before version 10.1.1.45 may allow an authenticated user to escalate privilege via local access.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
intelCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 22%
VendorProductVersion
intelchipset_device_software
𝑥
< 10.1.1.45
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/108767
https://support.lenovo.com/us/en/product_security/LEN-27840
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00224.html
http://www.securityfocus.com/bid/108767
https://support.lenovo.com/us/en/product_security/LEN-27840
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00224.html