Intel provides these materials as-is, with no express or implied warranties.Īll products, dates, and figures specified are preliminary based on current expectations, and are subject to change without notice. Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are deployed. Intel would like to thank Marius Gabriel Mihai for reporting this issue and working with us on coordinated disclosure. Intel has removed the USB 3.0 Creator Utility from distribution and recommends that users of the Intel® USB 3.0 Creator Utilty uninstall it or discontinue use at their earliest convenience. Intel® USB 3.0 Creator Utility in all versions. Vulnerability Details:ĭescription: Improper permissions for Intel(R) USB 3.0 Creator Utility all versions may allow an authenticated user to potentially enable escalation of privilege via local access.ĬVSS Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L Affected Products: Intel is discontinuing the hosting and support of this tool.
A potential security vulnerability in Intel® USB 3.0 Creator Utility may allow escalation of privilege.
