Insecure Inherited Permissions in Intel Driver and Support Assistant (DSA) - CVE-2024-36294
Published: November 14, 2024
Vulnerability identifier: #VU100494
CSH Severity: Low
CVSS v4: 5.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-36294
CWE-ID: CWE-277
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to insecure inherited permissions, which leads to security restrictions bypass and privilege escalation.
Affected software
Intel Driver and Support Assistant (DSA)
How to mitigate CVE-2024-36294
Install updates from vendor's website.
Intel Driver and Support Assistant (DSA) - update to 24.3.26.8