#VU96063 Incorrect default permissions in Intel products - CVE-2024-23974

Vulnerability identifier: #VU96063

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2024-23974

CWE-ID: CWE-276

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
Intel Integrated Sensor Hub software for 11th Generation Intel Core Processor Family
Intel Integrated Sensor Hub software for 12th Generation Intel Core Processor Family
Intel Integrated Sensor Hub software for Intel NUC M15 Laptop Kit LAPBC710
Intel Integrated Sensor Hub software for Intel NUC M15 Laptop Kit LAPBC510
Intel Integrated Sensor Hub software for Intel NUC M15 Laptop Kit LAPRC710
Intel Integrated Sensor Hub software for Intel NUC M15 Laptop Kit LAPRC510

Software vendor:
Intel

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect default permissions. A local user can gain elevated privileges on the target system.

Install updates from vendor's website.

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01088.html