CVE-2018-12177

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2018-12177
Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.0.7 may allow an authorized user to potentially enable escalation of privilege via local access.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector : AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

4.6 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00182.html Patch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:intel:proset\/wireless_software:*:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:dual_band_wireless-ac_3160:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:dual_band_wireless-ac_3165:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:dual_band_wireless-ac_3168:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:dual_band_wireless-ac_7260:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:dual_band_wireless-ac_7260_for_desktop:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:dual_band_wireless-ac_7265\(rev_c\):-:*:*:*:*:*:*:*
cpe:2.3:h:intel:dual_band_wireless-ac_7265_\(rev_d\):-:*:*:*:*:*:*:*
cpe:2.3:h:intel:dual_band_wireless-ac_8260:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:dual_band_wireless-ac_8265:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:dual_band_wireless-ac_8265_desktop_kit:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:dual_band_wireless-n_7260:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:dual_band_wireless-n_7265_\(rev_c\):-:*:*:*:*:*:*:*
cpe:2.3:h:intel:dual_band_wireless-n_7265_\(rev_d\):-:*:*:*:*:*:*:*
cpe:2.3:h:intel:tri-band_wireless-ac_17265:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:tri-band_wireless-ac_18260:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:tri-band_wireless-ac_18265:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:wireless-ac_9260:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:wireless-ac_9461:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:wireless-ac_9462:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:wireless-ac_9560:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:wireless-n_7260:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:wireless-n_7265_\(rev_c\):-:*:*:*:*:*:*:*
cpe:2.3:h:intel:wireless-n_7265_\(rev_d\):-:*:*:*:*:*:*:*
History

No history.

Information

Published : 2019-01-10 20:29

Updated : 2023-12-10 12:44

NVD link : CVE-2018-12177

Mitre link : CVE-2018-12177

CVE.ORG link : CVE-2018-12177

JSON object : View

Products Affected

intel

  • wireless-ac_9560
  • dual_band_wireless-ac_3165
  • tri-band_wireless-ac_17265
  • dual_band_wireless-ac_7260
  • wireless-n_7265_\(rev_c\)
  • dual_band_wireless-ac_8260
  • dual_band_wireless-ac_7260_for_desktop
  • dual_band_wireless-ac_8265_desktop_kit
  • dual_band_wireless-ac_3168
  • dual_band_wireless-ac_3160
  • tri-band_wireless-ac_18260
  • wireless-ac_9260
  • dual_band_wireless-n_7260
  • tri-band_wireless-ac_18265
  • proset\/wireless_software
  • dual_band_wireless-ac_8265
  • wireless-n_7260
  • dual_band_wireless-ac_7265\(rev_c\)
  • wireless-ac_9462
  • wireless-ac_9461
  • dual_band_wireless-n_7265_\(rev_d\)
  • dual_band_wireless-ac_7265_\(rev_d\)
  • dual_band_wireless-n_7265_\(rev_c\)
  • wireless-n_7265_\(rev_d\)
CWE
CWE-732

Incorrect Permission Assignment for Critical Resource