HIGH✓ PATCH🇬🇧 English

CVE-2019-0164

CVSS 7.3v3.1pub. 2019-06-13upd. 2024-11-21

Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

  • Intel Turbo Boost Max Technology 3.0

    APP
    Intel
    ≤ 1.0.0.1035

  • Lenovo Thinkstation P410

    HW
    Lenovo
    wszystkie wersje

  • Lenovo Thinkstation P410 Firmware

    OS
    Lenovo
    wszystkie wersje

  • Lenovo Thinkstation P510

    HW
    Lenovo
    wszystkie wersje

  • Lenovo Thinkstation P510 Firmware

    OS
    Lenovo
    wszystkie wersje

  • Lenovo Thinkstation P710

    HW
    Lenovo
    wszystkie wersje

  • Lenovo Thinkstation P710 Firmware

    OS
    Lenovo
    wszystkie wersje

  • Lenovo Thinkstation P910

    HW
    Lenovo
    wszystkie wersje

  • Lenovo Thinkstation P910 Firmware

    OS
    Lenovo
    wszystkie wersje
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Referencje

Powiązane podatności

CVE-2019-6190MEDIUM5.0ten sam produkt

Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Len...

CVE-2021-45046CRITICAL9.0⚠ KEVten sam vendor

It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-defau...

CVE-2021-44228CRITICAL10.0⚠ KEVten sam vendor

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features u...

CVE-2017-5689CRITICAL9.8⚠ KEVten sam vendor

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel A...

CVE-2017-5638CRITICAL9.8⚠ KEVten sam vendor

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect ex...