CVE-2017-5682
moderate-risk
Published 2017-02-28
Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library, and Intel Threading Building Blocks before 2017 Update 2 allows an attacker to launch a process with escalated privileges.
Do I need to act?
-
0.11% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.3/10
High
LOCAL
/ LOW complexity
Affected Products (12)
Advisor
Cryptography For Intel Integrated Performance Primitives
Data Analytics Acceleration Library
Integrated Performance Primitives
Mpi Library
Vtune Amplifier
Inspector
Math Kernel Library
Parallel Studio Xe
Threading Building Blocks
Affected Vendors
References (4)
Third Party Advisory
http://www.securityfocus.com/bid/96482
Third Party Advisory
http://www.securityfocus.com/bid/96482
40
/ 100
moderate-risk
Severity
23/34 · High
Exploitability
0/34 · Minimal
Exposure
17/34 · Moderate