« Volver al listado

CVE-2018-3697

Estado: ModificadaAlta (7.8)—

Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an escalation of privilege via local access.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Intel — Media Server Studio

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-3697",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@intel.com",
      "affectedData": [
        {
          "vendor": "Intel Corporation",
          "product": "Intel Media Server Studio",
          "versions": [
            {
              "status": "affected",
              "version": "Versions before 2019 Beta Release"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-11-14T14:29:00.440",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/106025",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "secure@intel.com"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00197.html",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "source": "secure@intel.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/106025",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00197.html",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-732"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an escalation of privilege via local access."
    },
    {
      "lang": "es",
      "value": "Los permisos incorrectos de directorio en el instalador para Intel Media Server Studio podrían permitir que usuarios no privilegiados habiliten un escalado de privilegios mediante acceso local."
    }
  ],
  "lastModified": "2026-06-17T01:57:41.263",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:intel:media_server_studio:2015:r6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5584CE26-7C0A-4818-B3B6-376C450281C8"
            },
            {
              "criteria": "cpe:2.3:a:intel:media_server_studio:2016:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0730B2D8-1367-468E-9007-40FD070C6860"
            },
            {
              "criteria": "cpe:2.3:a:intel:media_server_studio:2016:*:*:*:professional:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6B3B8A0C-BBF5-4762-9B79-C13B4008EF15"
            },
            {
              "criteria": "cpe:2.3:a:intel:media_server_studio:2017:*:*:*:professional:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D239D9C1-9A0E-4720-9999-39F2ACC6A88F"
            },
            {
              "criteria": "cpe:2.3:a:intel:media_server_studio:2017:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D3404425-674D-41A4-A99A-6382DAECB84E"
            },
            {
              "criteria": "cpe:2.3:a:intel:media_server_studio:2017:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4036BB3C-32C0-4F22-B761-9EED581A9666"
            },
            {
              "criteria": "cpe:2.3:a:intel:media_server_studio:2017:r3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1940457A-24BE-46B8-BBBC-7ED39095D6E2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@intel.com"
}