CVE-2018-12163 - A DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an authenticated user to potentially escalate privileges using file modification via local access

Back Back to CVE browser

MEDIUM

A DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an authenticated user to potentially escalate privileges using file modification via local access

Published Sep 12, 2018

4.8

MEDIUM

CVSS 3.0

EPSS 0.51%

Description

A DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an authenticated user to potentially escalate privileges using file modification via local access.

Affected products

Vendor Intel Corporation Product Intel IoT Developers Kit Default
n/a
- Version
  4.0 and earlier.
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Intel Corporation

Intel IoT Developers Kit

n/a

Version	Status	Constraints
4.0 and earlier.	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-427

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-4141
Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00173.html
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-4141		Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00173.html		x_refsource_CONFIRMVendor Advisory