CVE-2020-12335

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper permissions in the installer for the Intel(R) Processor Identification Utility before version 6.4.0603 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-281

Affected software

Vendor	Product	Versions
n/a	Intel(R) Processor Identification Utility	before version 6.4.0603

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00419Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00419Vendor Advisory

Timeline

Published: Nov 12, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-123367.8Insecure default variable initialization in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation CVE-2020-123376.7Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege vi CVE-2020-123389.8Insufficient control flow management in the Open WebRTC Toolkit before version 4.3.1 may allow an unauthenticated user to potentially enable CVE-2020-123398.8Insufficient control flow management in the API for the Intel(R) Collaboration Suite for WebRTC before version 4.3.1 may allow an authentica CVE-2020-12347.8An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles objects in memory.To exploit this vulnerabili CVE-2020-123457.8Improper permissions in the installer for the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to p CVE-2020-123467.8Improper permissions in the installer for the Intel(R) Battery Life Diagnostic Tool before version 1.0.7 may allow an authenticated user to CVE-2020-123478.8Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially en CVE-2020-123496.5Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially en CVE-2020-12357.8An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation CVE-2020-123507.8Improper access control in the Intel(R) XTU before version 6.5.1.360 may allow an authenticated user to potentially enable escalation of pri CVE-2020-123518.8Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.