Untrusted search path in Intel Chipset Software Installation Utility - CVE-2024-36291

Vulnerability identifier: #VU104107

CSH Severity: Low

CVSS v4: 5.4 [CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-36291

CWE-ID: CWE-426

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to usage of an untrusted search path. A local user can place a malicious binary into a specific location on the system and execute arbitrary code with escalated privileges.

Intel Chipset Software Installation Utility
OptiPlex Micro 7010 / OptiPlex Micro Plus 7010
OptiPlex All-in-One 7410
OptiPlex AIO 7420
OptiPlex 7780 All-in-One
OptiPlex 7770 All-In-One
OptiPlex 7490 All-in-One
OptiPlex 7480 All-in-One
OptiPlex 7470 All-In-One
OptiPlex 7400 All-In-One
Optiplex 7090 Ultra
OptiPlex 7090 Tower
OptiPlex 7080
OptiPlex Micro 7020
OptiPlex 7070 Ultra
OptiPlex 7000 Micro / OptiPlex 7000 Small Form Factor / OptiPlex 7000 Tower / OptiPlex 7000 XE Micro
OptiPlex 5490 All-In-One
OptiPlex 5480 All-In-One
OptiPlex 5400 All-In-One
OptiPlex 5270 All-In-One
OptiPlex 5090 Micro / OptiPlex 5090 Small Form Factor / OptiPlex 5090 Tower
OptiPlex 5080
OptiPlex 5070
OptiPlex 5000 Micro / OptiPlex 5000 Small Form Factor / OptiPlex 5000 Tower
OptiPlex 3280 All-in-One
Precision 3460 XE Small Form Factor / Precision 3460 Small Form Factor
Precision 3570
Precision 3561
Precision 3560
Precision 3551
Precision 3550
Precision 3541
Precision 3540
Precision 3530
Precision 3520
Precision 3490
Precision 3480
Precision 3470
OptiPlex 3090 Ultra
Precision 3450
Precision 3440
Precision 3280 CFF
Precision 3260 XE Compact / Precision 3260 Compact
OptiPlex XE4 Tower
OptiPlex XE4 SFF
OptiPlex Tower 7020
OptiPlex Tower 7010 / OptiPlex Tower Plus 7010
OptiPlex Small Form Factor 7010 / OptiPlex Small Form Factor Plus 7010
OptiPlex SFF 7020
Latitude 7320
Latitude 7410
Latitude 7400 2-in-1
Latitude 7400
Latitude 7390 2-in-1
Latitude 7390
Latitude 7380
Latitude 7350 Detachable
Latitude 7350
Latitude 7340
Latitude 7330 Rugged Laptop
Latitude 7330
Latitude 7320 Detachable
Latitude 7420
Latitude 7310
Latitude 7300
Latitude 7290
Latitude 7280
Latitude 7230 Rugged Extreme
Latitude 7220 Rugged Extreme
Latitude 7212 Rugged Extreme Tablet
Latitude 7210 2-in-1
Latitude 7200 2-in-1
Latitude 7030 Rugged Extreme
Latitude 5591
Latitude 5590
Latitude 9420
OptiPlex 3090
OptiPlex 3080
OptiPlex 3070
OptiPlex 3050 All-In-One
OptiPlex 3000 Thin Client
OptiPlex 3000 Micro / OptiPlex 3000 Small Form Factor / OptiPlex 3000 Tower
Latitude Rugged 7220EX
Latitude 9520
Latitude 9510 2in1
Latitude 9450
Latitude 9440 2-in-1
Latitude 9430
Precision 3571
Latitude 9410
Latitude 9330
Latitude 7650
Latitude 7640
Latitude 7530
Latitude 7520
Latitude 7490
Latitude 7480
Latitude 7450
Latitude 7440
Latitude 7430
Latitude 7424 Rugged Extreme
Vostro 3888
Wyse 5070
Vostro 7620
Vostro 7500
Vostro 5890
Vostro 5880
Vostro 5620
Vostro 5502
Vostro 5402
Vostro 5320
Vostro 5301
Vostro 3910
Vostro 3890
Wyse 5470
Vostro 3881
Vostro 3710
Vostro 3690
Vostro 3681
Vostro 3501
Vostro 3500
Vostro 3401
Vostro 3400
Vostro 3030S
Vostro 3030
Vostro 3020 Tower Desktop
Vostro 3020 Small Desktop
XPS 15 9500
XPS 9320
XPS 9315 2-in-1
XPS 8960
XPS 8950
XPS 8940
XPS 17 9730
XPS 17 9720
XPS 17 9710
XPS 16 9640
XPS 15 9530
XPS 15 9520
XPS 15 9510
Vostro 16 5640
XPS 15 7590
XPS 14 9440
XPS 13 9340
XPS 13 Plus 9320
XPS 13 9315
XPS 13 9310 2-in-1
XPS 13 9310
XPS 13 9300
XPS 13 7390 2-in-1
XPS 13 7390
XPS 13 9305
Wyse 5470 All-In-One
Precision 5530
Precision 7520
Precision 5860 Tower
Precision 5770
Precision 5760
Precision 5750
Precision 5690
Precision 5680
Precision 5570
Precision 5560
Precision 5550
Precision 5540
Precision 5530 2-in-1
Precision 7530
Precision 5490
Precision 5480
Precision 5470
Precision 3930 Rack
Precision 3680 Tower
Precision 3660
Precision 3650 Tower
Precision 3640
Precision 3591
Precision 3590
Precision 3581
Precision 3580
Vostro 16 5630
Vostro 15 7510
Vostro 15 5510
Vostro 15 3530
Vostro 15 3520
Vostro 15 3510
Vostro 14 5410
Vostro 14 3440
Vostro 14 3430
Vostro 14 3420
Vostro 13 5310
Precision 7960 Tower
Latitude 5580
Precision 7780
Precision 7770
Precision 7760
Precision 7750
Precision 7740
Precision 7730
Precision 7720
Precision 7680
Precision 7670
Precision 7560
Precision 7550
Precision 7540
ChengMing 3990
Dell Precision 5820 Tower
Dell Precision 3630 Tower
Dell Precision 3431 Tower
Dell Precision 3430 Tower
Dell G5 5000
Dell G16 7630
Dell G16 7620
Dell G15 5530
Dell G15 5520
Dell G15 5511
Dell G15 5510
ChengMing 3991
Dell Precision 7820 Tower
ChengMing 3910/3911
ChengMing 3900
AURORA R16
Alienware x17 R2
Alienware x17 R1
Alienware x16 R2
Alienware x16 R1
Alienware x15 R2
Alienware x15 R1
Alienware x14 R2
Alienware x14
Alienware M18 R2
Inspiron 14 Plus 7420
Inspiron 16 5640
Inspiron 16 5630
Inspiron 16 5620
Inspiron 15 7510
Inspiron 15 5510/5518
Inspiron 15 3530
Inspiron 15 3521
Inspiron 15 3520
Inspiron 15 3511
Inspiron 15 3510
Inspiron 14 Plus 7440
Inspiron 14 Plus 7430
Alienware m18 R1
Inspiron 14 7440 2-in-1
Inspiron 14 7430 2-in-1
Inspiron 14 7420 2-in-1
Inspiron 14 5440
Inspiron 14 5430
Inspiron 14 5420
Inspiron 14 5410/5418
Inspiron 13 5330
Inspiron 13 5320
Inspiron 13 5310
Dell Precision 7920 Tower
ThinkSmart Core Device for Logitech
ThinkPad P14s Gen 1 20S5
ThinkPad P14s Gen 1 20S4
ThinkPad P16v Gen 2 21KY
ThinkPad P16v Gen 2 21KX
ThinkSmart Core Device: Basic
ThinkSmart Core & IP Controller Kit: Zoom Rooms
ThinkSmart Core & IP Controller Full Room Kit: Zoom Rooms
ThinkSmart Hub Zoom
ThinkSmart Hub Teams
ThinkSmart Core IP Controller Kit & Bar 180
ThinkSmart Core Device: Zoom Rooms
ThinkSmart Core Device for Poly
ThinkPad P15s Gen 1 20T4
ThinkSmart Core Controller Kit & Bar 180
ThinkSmart Core & ThinkSmart Controller Kit: Zoom Rooms
ThinkSmart Core & ThinkSmart Controller Kit: Microsoft Teams Rooms
ThinkSmart Core & ThinkSmart Controller Full Room Kit: Zoom Rooms
ThinkSmart Core & ThinkSmart Controller Full Room Kit: Microsoft Teams Rooms
ThinkSmart Core & IP Controller Kit: Microsoft Teams Rooms/Zoom Rooms
ThinkSmart Core & IP Controller Kit: Microsoft Teams Rooms
ThinkSmart Core & IP Controller Full Room Kit: Microsoft Teams Rooms
ThinkEdge SE30
ThinkCentre M90n-1
ThinkPad X1 Fold 16 Gen 1 21ET
Alienware m17 R4
Alienware m17 R3
Alienware m16 R2
Alienware m16 R1
Alienware m15 R7
Alienware m15 R6
Alienware m15 R4
Alienware Aurora R15
Alienware Aurora R13
Alienware Aurora R12
Alienware Area 51m R2
ThinkStation P3 Ultra Workstation
Inspiron 16 7610
ThinkPad X1 Fold 16 Gen 1 21ES
ThinkPad X13 20T3
ThinkPad X13 20T2
ThinkPad T15 20S7
ThinkPad T15 20S6
ThinkPad T14s 20T1
ThinkPad T14s 20T0
ThinkPad T14 Gen 1 20S3
ThinkPad T14 Gen 1 20S2
ThinkPad T14 Gen 1 20S1
ThinkPad T14 Gen 1 20S0
ThinkPad P15s Gen 1 20T5
Latitude 3540
Latitude 5400
Latitude 5350
Latitude 5340
Latitude 5330
Latitude 5320
Latitude 5310 2-IN-1
Latitude 5310
Latitude 5300 2-IN-1
Latitude 5300
Latitude 5290 2-in-1
Latitude 5290
Latitude 3550
Latitude 5401
Latitude 3530
Latitude 3520
Latitude 3510
Latitude 3500
Latitude 3450
Latitude 3440
Latitude 3430
Latitude 3420
Latitude 3410
Latitude 3400
Latitude 3390 2-in-1
Latitude 3340
Latitude 5488
Latitude 5550
Latitude 5540
Latitude 5531
Latitude 5530
Latitude 5521
Latitude 5520
Latitude 5511
Latitude 5510
Latitude 5501
Latitude 5500
Latitude 5491
Latitude 5490
Latitude 3330
Latitude 5480
Latitude 5450
Latitude 5440
Latitude 5431
Latitude 5430 Rugged Laptop
Latitude 5430
Latitude 5424 Rugged
Latitude 5421
Latitude 5420 Rugged
Latitude 5420
Latitude 5411
Latitude 5410
Inspiron 3030
Inspiron 5406 2-in-1
Inspiron 5402
Inspiron 5401 AIO
Inspiron 5400/5401
Inspiron 5301
Inspiron 3910
Inspiron 3891
Inspiron 3881
Inspiron 3880
Inspiron 3502
Inspiron 3501
Inspiron 3030S
Inspiron 5409
Inspiron 3020 Small Desktop
Inspiron 3020 Desktop
Inspiron 27 7730 All-in-One
Inspiron 27 7720 All-in-One
Inspiron 24 5430 All-in-One
Inspiron 24 5420 All-in-One
Inspiron 16 Plus 7640
Inspiron 16 Plus 7630
Inspiron 16 Plus 7620
Inspiron 16 7640 2-in-1
Inspiron 16 7630 2-in-1
Inspiron 16 7620 2-in-1
Inspiron 7710 All-in-One
Latitude 3320
Latitude 3310 2-in-1
Latitude 3310
Latitude 3301
Latitude 3300
Latitude 3190 2-In-1
Latitude 3190
Latitude 3189
Latitude 3180
Latitude 3140 2in1
Latitude 3120
Latitude 12 Rugged Extreme 7214
Inspiron 7706 2-in-1
Inspiron 7700 All-In-One
Inspiron 7506 2-in-1
Inspiron 7501
Inspiron 7500
Inspiron 7400
Inspiron 7306 2-in-1
Inspiron 7300
Inspiron 5509
Inspiron 5502
Inspiron 5410 All-In-One
Inspiron 5410
OptiPlex 7071
OptiPlex 7070
Precision 3240 Compact
OptiPlex XE3
Embedded Box PC 5000
Precision 7960 Rack
Intel Chipset Device Software for Windows 11 (Version 21H2 or later) - ThinkPad X1 Fold 16 Gen 1 (Type 21ES, 21ET)
Intel Chipset Device Software for Windows 11 (Version 21H2 or later), 10 (Version 1809 or Later) - ThinkPad
Intel Chipset Device for Windows 11 (Version 22H2 or later), 10 (Version 21H2 or later) - ThinkPad P16v Gen 2 (Type 21KX, 21KY)
Intel Chipset Driver for Windows 10 IOT 64-bit - ThinkCentre M90n-1
Intel Chipset Driver for Windows 10 64-bit (Version 1709, 1803) - ThinkCentre M90n-1
Intel Chipset Driver for Windows 10 (64-bit), Windows 10 IoT (64-bit), Windows 11 IoT 64bit - ThinkEdge SE30
Intel Chipset Driver for Windows IoT 10 (64-bit) - ThinkSmart Core
Intel Chipset Driver for Windows IoT 10 (64-bit) - ThinkSmart Hub Teams
Intel Chipset Driver for Windows 10 IoT (64-bit), Windows 11 IoT 64bit - ThinkSmart Core
Intel Chipset Driver for Windows IoT 10 (64-bit) - ThinkSmart Hub Zoom
Intel Chipset Driver for Windows IoT 11 (64-bit) - ThinkSmart Core
Intel Chipset Driver for Windows 10 IoT (64-bit) , Windows 11 IoT (64-bit) - ThinkSmart Hub Teams, ThinkSmart Hub Zoom
Intel Chipset Driver for Windows 10 (Version 22H2), 11 (Version 22H2 or Later) - ThinkStation P3 Ultra
Intel Chipset Device Software

Install updates from vendor's website.

Intel Chipset Software Installation Utility - update to 10.1.19867.8574
Intel Chipset Driver for Windows 10 IOT 64-bit - ThinkCentre M90n-1 - update to 10.1.24.6
Intel Chipset Driver for Windows 10 64-bit (Version 1709, 1803) - ThinkCentre M90n-1 - update to 10.1.24.6
Intel Chipset Driver for Windows 10 (64-bit), Windows 10 IoT (64-bit), Windows 11 IoT 64bit - ThinkEdge SE30 - update to 10.1.24.6
Intel Chipset Driver for Windows IoT 10 (64-bit) - ThinkSmart Core - update to 10.1.24.6
Intel Chipset Driver for Windows IoT 10 (64-bit) - ThinkSmart Hub Teams - update to 10.1.24.6
Intel Chipset Driver for Windows 10 IoT (64-bit), Windows 11 IoT 64bit - ThinkSmart Core - update to 10.1.24.6
Intel Chipset Driver for Windows IoT 10 (64-bit) - ThinkSmart Hub Zoom - update to 10.1.24.6
Intel Chipset Driver for Windows IoT 11 (64-bit) - ThinkSmart Core - update to 10.1.24.6
Intel Chipset Driver for Windows 10 IoT (64-bit) , Windows 11 IoT (64-bit) - ThinkSmart Hub Teams, ThinkSmart Hub Zoom - update to 10.1.24.6
Intel Chipset Driver for Windows 10 (Version 22H2), 11 (Version 22H2 or Later) - ThinkStation P3 Ultra - update to 10.1.19600.8418
Intel Chipset Device Software - addressed in versions 10.1.19928.8615, 10.1.19949.8616

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01184.html

• Untrusted search path in Intel Chipset Software Installation Utility
• Lenovo update for Intel Chipset Software Installation Utility
• Dell Client Platform update for Intel Chipset software installation utility