CVE-2020-0546 - Unquoted service path in Intel(R) Optane(TM) DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an authenticated user to potentially enable escalation of privilege and denial of service via local access

Back Back to CVE browser

HIGH

Unquoted service path in Intel(R) Optane(TM) DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an authenticated user to potentially enable escalation of privilege and denial of service via local access

Published Mar 12, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.34%

Description

Unquoted service path in Intel(R) Optane(TM) DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an authenticated user to potentially enable escalation of privilege and denial of service via local access.

Affected products

Vendor Intel Product Intel® Optane(TM) DC Persistent Memory Module Management Software Default
n/a
- Version
  See advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00326.html
  Status
  affected
  Constraints
  -
- Version
  before version 1.0.0.3461
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Intel

Intel® Optane(TM) DC Persistent Memory Module Management Software

n/a

Version	Status	Constraints
See advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00326.html	affected	-
before version 1.0.0.3461	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-428

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-2044
Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00326.html
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-2044		Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00326.html		x_refsource_CONFIRMVendor Advisory