Incorrect default permissions in Intel products - CVE-2024-23974

Vulnerability identifier: #VU96063

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2024-23974

CWE-ID: CWE-276

Exploitation vector: Local access

Exploit availability: No public exploit available

Vendor: Intel

Affected software:
Intel Integrated Sensor Hub software for 11th Generation Intel Core Processor Family
Intel Integrated Sensor Hub software for 12th Generation Intel Core Processor Family
Intel Integrated Sensor Hub software for Intel NUC M15 Laptop Kit LAPBC710
Intel Integrated Sensor Hub software for Intel NUC M15 Laptop Kit LAPBC510
Intel Integrated Sensor Hub software for Intel NUC M15 Laptop Kit LAPRC710
Intel Integrated Sensor Hub software for Intel NUC M15 Laptop Kit LAPRC510

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect default permissions. A local user can gain elevated privileges on the target system.

Install updates from vendor's website.

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01088.html