CVE-2019-0164

HIGH

Intel Turbo Boost Max Technology 3.0 < 1.0.0.1035 - Authenticated Privilege Escalation via Installer Permissions

Title source: llm

Description

Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_confirm

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00243.html

Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/108770

Third Party Advisory x_refsource_confirm

https://support.lenovo.com/us/en/product_security/LEN-27841

Scores

CVSS v3 7.3

EPSS 0.0007

EPSS Percentile 20.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-264

Status published

Products (5)

intel/turbo_boost_max_technology_3.0 < 1.0.0.1035

lenovo/thinkstation_p410_firmware

lenovo/thinkstation_p510_firmware

lenovo/thinkstation_p710_firmware

lenovo/thinkstation_p910_firmware

Published Jun 13, 2019

Tracked Since Feb 18, 2026