Lucene search

IntelCVE-2016-8102

HistoryDec 08, 2016 - 5:59 p.m.

CVE-2016-8102

2016-12-0817:59:00

CWE-264

intel

web.nvd.nist.gov

cve-2016-8102

unquoted service path

intel wireless bluetooth drivers

vulnerability

local users

elevated privileges

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Unquoted service path vulnerability in Intel Wireless Bluetooth Drivers 16.x, 17.x, and before 18.1.1607.3129 allows local users to launch processes with elevated privileges.

Affected configurations

Nvd

Node

intelwireless_bluetooth_driversMatch16.0

intelwireless_bluetooth_driversMatch17.0

intelwireless_bluetooth_driversMatch18.0

intelwireless_bluetooth_driversMatch18.1

VendorProductVersionCPE
intelwireless_bluetooth_drivers16.0cpe:2.3:a:intel:wireless_bluetooth_drivers:16.0:*:*:*:*:*:*:*
intelwireless_bluetooth_drivers17.0cpe:2.3:a:intel:wireless_bluetooth_drivers:17.0:*:*:*:*:*:*:*
intelwireless_bluetooth_drivers18.0cpe:2.3:a:intel:wireless_bluetooth_drivers:18.0:*:*:*:*:*:*:*
intelwireless_bluetooth_drivers18.1cpe:2.3:a:intel:wireless_bluetooth_drivers:18.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	wireless_bluetooth_drivers	16.0	cpe:2.3:a:intel:wireless_bluetooth_drivers:16.0:::::::*
intel	wireless_bluetooth_drivers	17.0	cpe:2.3:a:intel:wireless_bluetooth_drivers:17.0:::::::*
intel	wireless_bluetooth_drivers	18.0	cpe:2.3:a:intel:wireless_bluetooth_drivers:18.0:::::::*
intel	wireless_bluetooth_drivers	18.1	cpe:2.3:a:intel:wireless_bluetooth_drivers:18.1:::::::*

CNA Affected

[
  {
    "product": "Intel Wireless Bluetooth Drivers",
    "vendor": "Intel",
    "versions": [
      {
        "status": "affected",
        "version": "16.x, 17.x, and before 18.1.1607.3129"
      }
    ]
  }
]

References

www.securityfocus.com/bid/95010

security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00059&languageid=en-fr

support.lenovo.com/us/en/solutions/LEN-11158

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2016-8102