Intel Battery Life Diagnostic Tool vulnerabilities

9 known vulnerabilities affecting intel/battery_life_diagnostic_tool.

Total CVEs
9
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH7MEDIUM2

Vulnerabilities

Page 1 of 1
CVE-2023-35060HIGHCVSS 7.8fixed in 2.3.12024-02-14
CVE-2023-35060 [MEDIUM] CWE-427 CVE-2023-35060: Uncontrolled search path in some Intel(R) Battery Life Diagnostic Tool software before version 2.3.1 Uncontrolled search path in some Intel(R) Battery Life Diagnostic Tool software before version 2.3.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
nvd
CVE-2022-38786HIGHCVSS 7.8fixed in 2.2.12023-11-14
CVE-2022-38786 [MEDIUM] CWE-284 CVE-2022-38786: Improper access control in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may Improper access control in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
nvd
CVE-2023-34430HIGHCVSS 7.8fixed in 2.2.12023-11-14
CVE-2023-34430 [MEDIUM] CWE-427 CVE-2023-34430: Uncontrolled search path in some Intel Battery Life Diagnostic Tool software before version 2.2.1 ma Uncontrolled search path in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
nvd
CVE-2023-32662MEDIUMCVSS 6.7fixed in 2.2.12023-11-14
CVE-2023-32662 [MEDIUM] CWE-285 CVE-2023-32662: Improper authorization in some Intel Battery Life Diagnostic Tool installation software before versi Improper authorization in some Intel Battery Life Diagnostic Tool installation software before version 2.2.1 may allow a privilaged user to potentially enable escalation of privilege via local access.
nvd
CVE-2023-30763MEDIUMCVSS 6.7fixed in 1.22023-05-12
CVE-2023-30763 [HIGH] CWE-122 CVE-2023-30763: Heap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privilege Heap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privileged user to potentially enable escalation of privilege via local access.
nvd
CVE-2022-34153HIGHCVSS 7.8v2.2.02023-02-16
CVE-2022-34153 [HIGH] CWE-665 CVE-2022-34153: Improper initialization in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 m Improper initialization in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
nvd
CVE-2022-36398HIGHCVSS 7.8v2.2.02023-02-16
CVE-2022-36398 [MEDIUM] CWE-427 CVE-2022-36398: Uncontrolled search path in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 Uncontrolled search path in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
nvd
CVE-2022-36278HIGHCVSS 7.8v2.2.02023-02-16
CVE-2022-36278 [HIGH] CVE-2022-36278: Insufficient control flow management in the Intel(R) Battery Life Diagnostic Tool software before ve Insufficient control flow management in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
nvd
CVE-2020-12346HIGHCVSS 7.8fixed in 1.0.72020-11-12
CVE-2020-12346 [HIGH] CWE-276 CVE-2020-12346: Improper permissions in the installer for the Intel(R) Battery Life Diagnostic Tool before version 1 Improper permissions in the installer for the Intel(R) Battery Life Diagnostic Tool before version 1.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.
nvd