CVE-2020-0508 - Incorrect default permissions in the installer for Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable escalation of privilege via local access

Back Back to CVE browser

HIGH

Incorrect default permissions in the installer for Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable escalation of privilege via local access

Published Mar 12, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.32%

Description

Incorrect default permissions in the installer for Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

Vendor Intel Product Intel(R) Graphics Drivers Default
n/a
- Version
  15.36.38.5117
  Status
  affected
  Constraints
  -
- Version
  15.40.44.5107
  Status
  affected
  Constraints
  -
- Version
  15.45.30.5103
  Status
  affected
  Constraints
  -
- Version
  See advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html
  Status
  affected
  Constraints
  -
- Version
  and 26.20.100.7212
  Status
  affected
  Constraints
  -
- Version
  before versions 15.33.49.5100
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Intel

Intel(R) Graphics Drivers

n/a

Version	Status	Constraints
15.36.38.5117	affected	-
15.40.44.5107	affected	-
15.45.30.5103	affected	-
See advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html	affected	-
and 26.20.100.7212	affected	-
before versions 15.33.49.5100	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

References (2)

https://security.netapp.com/advisory/ntap-20200320-0003/
x_refsource_CONFIRMThird Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://security.netapp.com/advisory/ntap-20200320-0003/		x_refsource_CONFIRMThird Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html		x_refsource_CONFIRMVendor Advisory