VULNERABILITY INTELLIGENCE

CVE-2024-21835

CVSS score6.7 MEDIUM
EPSS probability0.16%
CISA KEVNot currently listed
Published2024-05-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

Insecure inherited permissions in some Intel(R) XTU software before version 7.14.0.15 may allow an authenticated user to potentially enable escalation of privilege via local access.

Weakness classification

  • CWE-277: Insecure Inherited Permissions
  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references