CVE-2020-12331

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper access controls in Intel Unite(R) Cloud Service client before version 4.2.12212 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	Intel Unite(R) Cloud Service client	before version 4.2.12212

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00418Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00418Vendor Advisory

Timeline

Published: Nov 12, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-123327.8Improper permissions in the installer for the Intel(R) HID Event Filter Driver, all versions, may allow an authenticated user to potentially CVE-2020-123337.8Insufficiently protected credentials in the Intel(R) QAT for Linux before version 1.7.l.4.10.0 may allow an authenticated user to potentiall CVE-2020-123347.8Improper permissions in the installer for the Intel(R) Advisor tools before version 2020 Update 2 may allow an authenticated user to potenti CVE-2020-123357.8Improper permissions in the installer for the Intel(R) Processor Identification Utility before version 6.4.0603 may allow an authenticated u CVE-2020-123367.8Insecure default variable initialization in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation CVE-2020-123376.7Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege vi CVE-2020-123389.8Insufficient control flow management in the Open WebRTC Toolkit before version 4.3.1 may allow an unauthenticated user to potentially enable CVE-2020-123398.8Insufficient control flow management in the API for the Intel(R) Collaboration Suite for WebRTC before version 4.3.1 may allow an authentica CVE-2020-12347.8An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles objects in memory.To exploit this vulnerabili CVE-2020-123457.8Improper permissions in the installer for the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to p CVE-2020-123467.8Improper permissions in the installer for the Intel(R) Battery Life Diagnostic Tool before version 1.0.7 may allow an authenticated user to CVE-2020-123478.8Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially en