Intel(R) Dynamic Platform and Thermal Framework
At a glance
- Source
- NVD
- EPSS
- EPSS 0.44 % · percentile 39 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- intel
- NVD status
- Modified
Description
Improper permissions in the Intel(R) Dynamic Platform and Thermal Framework v8.3.10208.5643 and before may allow an authenticated user to potentially execute code at an elevated level of privilege.
Weaknesses (CWE)
- CWE-276 — Incorrect Default Permissions
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | MEDIUM 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2019-0941
- GCVE · GCVE-0-2019-0134
CERT-FR advisories
- CERTFR-2019-AVI-623 — Multiples vulnérabilités dans les produits Intel · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:a:intel:dynamic_platform_and_thermal_framework:*:*:*:*:*:*:*:*≤ 8.3.10208.5643
Affected products
| Product | Versions |
|---|---|
| Intel(R) Dynamic Platform and Thermal Framework | affected v8.3.10208.5643 and before |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |