VULNERABILITY INTELLIGENCE
CVE-2018-12160
CVSS score5.3 MEDIUM
EPSS probability0.43%
CISA KEVNot currently listed
Published2018-09-12
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Description
DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access.
Weakness classification
- CWE-276: Incorrect Default Permissions
- CWE-427: Uncontrolled Search Path Element
Primary references
- secure@intel.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory