Intel would like to thank Marius Gabriel Mihai for reporting this issue and working with us on coordinated disclosure. Intel has removed the USB 3.0 Creator Utility from distribution and recommends that users of the Intel® USB 3.0 Creator Utilty uninstall it or discontinue use at their earliest convenience.
Intel® USB 3.0 Creator Utility in all versions.
Vulnerability Details:ĭescription: Improper permissions for Intel(R) USB 3.0 Creator Utility all versions may allow an authenticated user to potentially enable escalation of privilege via local access.ĬVSS Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L Affected Products: Intel is discontinuing the hosting and support of this tool. A potential security vulnerability in Intel® USB 3.0 Creator Utility may allow escalation of privilege.
