VULNERABILITY INTELLIGENCE
CVE-2024-37025
CVSS score5.4 MEDIUM
EPSS probability0.15%
CISA KEVNot currently listed
Published2024-11-13
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
Incorrect execution-assigned permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installer before version 23.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Weakness classification
- CWE-279: Incorrect Execution-Assigned Permissions