VULNERABILITY INTELLIGENCE

CVE-2024-28172

CVSS score5.4 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2024-08-14
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Description

Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Weakness classification

  • CWE-427: Uncontrolled Search Path Element

Primary references