DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access.
During installation, installed file permissions are set to allow anyone to modify those files.
Link | Tags |
---|---|
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00170.html | vendor advisory |