VulnerabilityModified

CVE-2020-24460

Incorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may allow an authenticated user to potentially enable denial of service via local access.

MEDIUM 5.5EPSS 0.25%

Does this matter?

Lower severity and a low EPSS score (0.25%). Track it; it rarely justifies an emergency change on its own.

Description

Incorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may allow an authenticated user to potentially enable denial of service via local access.

CVSS 3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.25% probability · 16th percentile
CISA KEV: Not listed
Weakness: CWE-276
Affected: intel/driver \& support assistant
Source: secure@intel.com

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00449Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00449Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.