Description
Permissions in the driver pack installers for Intel NVMe before version 4.0.0.1007 and Intel RSTe before version 4.7.0.2083 may allow an authenticated user to potentially escalate privilege via local access.
Metrics
CVSS 3.0 7.8/10
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Intel Corporation | Intel NVMe and Intel RSTe | Various |
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00154.htmlPatch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00154.htmlPatch, Vendor Advisory
Timeline
- Published
- Oct 10, 2018
- Last modified
- Jun 17, 2026
- NVD status
- Modified