Description
Uncontrolled search path for some Intel(R) Advisor software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
Published: 2025-02-12
Score: 5.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-4942 Uncontrolled search path for some Intel(R) Advisor software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
History

Tue, 02 Sep 2025 16:15:00 +0000

Type Values Removed Values Added
First Time appeared Intel
Intel advisor
Intel oneapi Base Toolkit
CPEs cpe:2.3:a:intel:advisor:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:oneapi_base_toolkit:*:*:*:*:*:*:*:*
Vendors & Products Intel
Intel advisor
Intel oneapi Base Toolkit

Sat, 12 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00013}

 epss

{'score': 0.00014}

Fri, 11 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00027}

 epss

{'score': 0.00013}

Thu, 13 Feb 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 12 Feb 2025 21:30:00 +0000

Type Values Removed Values Added
Description Uncontrolled search path for some Intel(R) Advisor software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
Weaknesses CWE-427
References
Metrics cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 5.4, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Intel Advisor Oneapi Base Toolkit
cve-icon MITRE

Status: PUBLISHED

Assigner: intel

Published:

Updated: 2025-02-13T20:19:50.701Z

Reserved: 2024-06-25T03:00:08.255Z

Link: CVE-2024-39284

cve-icon Vulnrichment

Updated: 2025-02-13T20:19:38.529Z

cve-icon NVD

Status : Analyzed

Published: 2025-02-12T22:15:36.083

Modified: 2025-09-02T16:07:49.830

Link: CVE-2024-39284

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses