CVE-2018-18097

HIGH

Intel Solid State Drive Toolbox - Incorrect Permission Assignment

Title source: rule
STIX 2.1

Description

Improper directory permissions in Intel Solid State Drive Toolbox before 3.5.7 may allow an authenticated user to potentially enable escalation of privilege via local access.

References (1)

Core 1

Scores

CVSS v3 7.8
EPSS 0.0004
EPSS Percentile 11.0%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-732
Status published
Products (1)
intel/solid_state_drive_toolbox < 3.5.7
Published Dec 14, 2018
Tracked Since Feb 18, 2026