Intel Driver Support Assistant

Intel(R) DSA Software Insecure Inherited Permissions Privilege Escalation Vulnerability
CVE-2024-36294 7.8 - High - November 13, 2024

Insecure inherited permissions for some Intel(R) DSA software before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access.

Incorrect Permission Assignment for Critical Resource

Intel(R) DSA Improper Access Control Privilege Escalation Vulnerability
CVE-2024-36488 7.8 - High - November 13, 2024

Improper Access Control in some Intel(R) DSA before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access.

Authorization

Intel DSA Uninstallers Uncontrolled Search Path (before 23.4.39.10)
CVE-2023-45743 7.3 - High - May 16, 2024

Uncontrolled search path in some Intel(R) DSA software uninstallers before version 23.4.39.10 may allow an authenticated user to potentially enable escalation of privilege via local access.

DLL preloading

Intel DSA Service LPE via Symlink Following
CVE-2023-50197 - May 03, 2024

Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Intel Driver & Support Assistant. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DSA Service. By creating a symbolic link, an attacker can abuse the service to write a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-21845.

Intel DSA Service LPE via Symbolic Link File Delete
CVE-2023-42099 - May 03, 2024

Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Intel Driver & Support Assistant. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DSA Service. By creating a symbolic link, an attacker can abuse the service to delete a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-21846.

Intel DSA Software <23.4.33: Improper Access Control Local Priv Escalation
CVE-2023-39425 7.8 - High - February 14, 2024

Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentially enable escalation of privilege via local access.

Intel DSA <23.4.33 DoS via Local Access (Improper Access Control)
CVE-2023-25073 5.5 - Medium - February 14, 2024

Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentially enable denial of service via local access.

Intel DSA Privilege Escalation via Improper Access Control | <23.4.33
CVE-2023-35062 6.7 - Medium - February 14, 2024

Improper access control in some Intel(R) DSA software before version 23.4.33 may allow a privileged user to potentially enable escalation of privilege via local access.

XSS in Intel DSA Software < v23.1.9 Enables Priv Escal via Net Access
CVE-2023-27515 9.6 - Critical - August 11, 2023

Cross-site scripting (XSS) for the Intel(R) DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escalation of privilege via network access.

XSS

Intel DSA Privilege Escalation via Local Access, before v22.4.26
CVE-2022-30530 7.8 - High - February 16, 2023

Protection mechanism failure in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access.

Race Condition in Intel DSA <22.4.26 Enables Priv Esc via Local Auth
CVE-2022-32764 7 - High - February 16, 2023

Description: Race condition in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access.

Race Condition

Intel DSA < 22.2.14 Improper Access Control PrivEsc
CVE-2022-26017 8 - High - August 18, 2022

Improper access control in the Intel(R) DSA software for before version 22.2.14 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.

Insufficient control flow management in Intel(R) DSA before version 20.11.50.9 may
CVE-2021-0073 7.8 - High - June 09, 2021

Insufficient control flow management in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable escalation of privilege via local access.

Uncontrolled search path element in Intel(R) DSA before version 20.11.50.9 may
CVE-2021-0090 7.3 - High - June 09, 2021

Uncontrolled search path element in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access.

DLL preloading

Improper link resolution before file access in Intel(R) DSA before version 20.11.50.9 may
CVE-2021-0094 7.8 - High - June 09, 2021

Improper link resolution before file access in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access.

insecure temporary file

Incorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may
CVE-2020-24460 5.5 - Medium - November 12, 2020

Incorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may allow an authenticated user to potentially enable denial of service via local access.

Incorrect Default Permissions

Improper permissions in the Intel(R) Driver & Support Assistant before version 20.7.26.7 may
CVE-2020-12302 - October 05, 2020

Improper permissions in the Intel(R) Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user to potentially enable escalation of privilege via local access.

Race condition in the Intel(R) Driver and Support Assistant before version 20.1.5 may
CVE-2020-0568 4.7 - Medium - April 15, 2020

Race condition in the Intel(R) Driver and Support Assistant before version 20.1.5 may allow an authenticated user to potentially enable denial of service via local access.

Race Condition

Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may
CVE-2019-11146 7.8 - High - August 19, 2019

Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escalation of privilege via local access.

Permission Issues

Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may
CVE-2019-11145 7.8 - High - August 19, 2019

Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escalation of privilege via local access.

Permission Issues

Insufficient input validation in Intel(R) Driver & Support Assistant version 19.3.12.3 and before may
CVE-2019-11114 4.4 - Medium - May 17, 2019

Insufficient input validation in Intel(R) Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable denial of service via local access.

Improper Input Validation

Insufficient access control in Intel(R) Driver & Support Assistant version 19.3.12.3 and before may
CVE-2019-11095 4.4 - Medium - May 17, 2019

Insufficient access control in Intel(R) Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable information disclosure via local access.

Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may
CVE-2018-12148 7.8 - High - September 12, 2018

Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially execute code as administrator via local access.

Incorrect Permission Assignment for Critical Resource

SEMA driver in Intel Driver and Support Assistant before version 3.1.1
CVE-2018-3610 6 - Medium - January 09, 2018

SEMA driver in Intel Driver and Support Assistant before version 3.1.1 allows a local attacker the ability to read and writing to Memory Status registers potentially allowing information disclosure or a denial of service condition.

Buffer Overflow