CVE-2019-0135

HIGH

Intel RSTe < 5.5.0.2015 - Authenticated Privilege Escalation via Installer Permissions

Title source: llm
STIX 2.1

Description

Improper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. L-SA-00206

References (2)

Core 2
Core References
Third Party Advisory x_refsource_confirm
https://support.lenovo.com/us/en/product_security/LEN-27843

Scores

CVSS v3 7.8
EPSS 0.0010
EPSS Percentile 27.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-264
Status published
Products (5)
intel/rapid_storage_technology_enterprise < 5.5.0.2015
lenovo/thinkstation_p520_firmware
lenovo/thinkstation_p520c_firmware
lenovo/thinkstation_p720_firmware
lenovo/thinkstation_p920_firmware
Published Mar 14, 2019
Tracked Since Feb 18, 2026