CVE-2018-12177: High severity Intel Proset\/wireless Software vulnerability

Q: What is CVE-2018-12177?

CVE-2018-12177 is a vulnerability in the ZeroConfig service in Intel PROSet/Wireless WiFi Software that allows an authorized user to potentially enable escalation of privilege via local access.

Q: What is the severity of CVE-2018-12177?

The severity of CVE-2018-12177 is high with a CVSS score of 7.8.

Q: What software is affected by CVE-2018-12177?

Intel PROSet/Wireless WiFi Software before version 20.90.0.7 is affected by CVE-2018-12177.

Q: How can an attacker exploit CVE-2018-12177?

An attacker with local access can potentially exploit CVE-2018-12177 to escalate privileges.

Q: Where can I find more information about CVE-2018-12177?

More information about CVE-2018-12177 can be found at the following link: [Intel Security Advisory INTEL-SA-00182](https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00182.html).

Published Jan 10, 2019

Updated

Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.0.7 may allow an authorized user to potentially enable escalation of privilege via local access.

Affected Software

24 affected components

Intel Proset\/wireless Software<20.90.0.7

Intel Dual Band Wireless-ac 3160

Intel Dual Band Wireless-ac 3165

Intel Dual Band Wireless-ac 3168

Intel Dual Band Wireless-ac 7260

Intel Dual Band Wireless-ac 7260 For Desktop

Intel Dual Band Wireless-ac 7265\(rev C\)

Intel Dual Band Wireless-ac 7265 \(rev D\)

Intel Dual Band Wireless-ac 8260

Intel Dual Band Wireless-ac 8265

Intel Dual Band Wireless-ac 8265 Desktop Kit

Intel Dual Band Wireless-n 7260

Intel Dual Band Wireless-n 7265 \(rev C\)

Intel Dual Band Wireless-n 7265 \(rev D\)

Intel Tri-band Wireless-ac 17265

Intel Tri-band Wireless-ac 18260

Intel Tri-band Wireless-ac 18265

Intel Wireless-ac 9260

Intel Wireless-ac 9461

Intel Wireless-ac 9462

Intel Wireless-ac 9560

Intel Wireless-n 7260

Intel Wireless-n 7265 \(rev C\)

Intel Wireless-n 7265 \(rev D\)

Remediation

Patch Available

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00182.html

Event History

Jan 10, 2019

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-12177?

CVE-2018-12177 is a vulnerability in the ZeroConfig service in Intel PROSet/Wireless WiFi Software that allows an authorized user to potentially enable escalation of privilege via local access.

What is the severity of CVE-2018-12177?

The severity of CVE-2018-12177 is high with a CVSS score of 7.8.

What software is affected by CVE-2018-12177?