CVE-2020-0557 — Incorrect Permission Assignment in Intel Proset Wireless Wifi

CWE-732 — Incorrect Permission AssignmentCWE-269 — Improper Privilege Management3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.1%
top 77.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Intel Proset Wireless WifiIntel Proset Wireless Wifi Software
Timeline
PublishedApr 15
Latest updateMay 24

Description

Insecure inherited permissions in Intel(R) PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDintel/proset_wireless_wifi< 21.70.0.6+2
▶CVEListV5intel_proset/wireless_wifi_softwareBefore version 21.70

🔴Vulnerability Details

2
GHSA
GHSA-4cj9-m6pr-4w4x: Insecure inherited permissions in Intel(R) PROSet/Wireless WiFi products before version 21↗2022-05-24
▶
CVEList
CVE-2020-0557: Insecure inherited permissions in Intel(R) PROSet/Wireless WiFi products before version 21↗2020-04-15
▶
CVE-2020-0557 — Incorrect Permission Assignment | cvebase