CVE-2020-0520

CWE-22 — Path TraversalCWE-269 — Improper Privilege Management4 documents4 sources
Severity
7.8HIGH
EPSS
0.1%
top 76.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Intel Graphics DriverIntel Intel(r) Graphics Drivers
Timeline
PublishedMar 12
Latest updateMay 24

Description

Path traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5intel/intel(r)_graphics_drivers5 versions+4
▶NVDintel/graphics_driver15.33 — 15.33.49.5100+3

🔴Vulnerability Details

2
GHSA
GHSA-7hjq-6rpg-gmgh: Path traversal in igdkmd64↗2022-05-24
▶
CVEList
CVE-2020-0520: Path traversal in igdkmd64↗2020-03-12
▶
CVE-2020-0520 (HIGH CVSS 7.8) | Path traversal in igdkmd64.sys for | cvebase.io