CVE-2024-37025 Vulnerability Details

Record summary

CVE-2024-37025 has a selected CVSS score of 5.4 (medium).

Description

Incorrect execution-assigned permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installer before version 23.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone

AutomatableNo

Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 14, 2024 · Source: CVE List

Affected products and versions

Product	Source	Version range	Status
intel_advanced_link_analyzer_standard_edition_software_installer Browse intel_advanced_link_analyzer_standard_edition_software_installer / intel_advanced_link_analyzer_standard_edition_software_installer Default status: unknown	CVE List	Before 23.1.1	affected
Intel(R) Advanced Link Analyzer Standard Edition software installer Default status: unaffected	CVE List	before version 23.1.1	affected

References

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2024-37025

intel.com

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01197.html