Intel Processor Diagnostic Tool vulnerabilities

5 CVEs affecting Intel Processor Diagnostic Tool, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-21831, published 2024-05-16.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-11133, published 2019-07-11. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Improper access control in the Intel(R) Processor Diagnostic Tool before version 4.1.2.24 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or…
• CVE-2018-3667, published 2018-07-10. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Installation tool IPDT (Intel Processor Diagnostic Tool) 4.1.0.24 sets permissions of installed files incorrectly, allowing for execution of arbitrary code and potential privilege escalation.
• CVE-2018-3668, published 2018-07-10. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Unquoted service paths in Intel Processor Diagnostic Tool (IPDT) before version 4.1.0.27 allows a local attacker to potentially execute arbitrary code.
• CVE-2020-8702, published 2021-06-09. High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days. Uncontrolled search path element in the Intel(R) Processor Diagnostic Tool before version 4.1.5.37 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2024-21831, published 2024-05-16. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Uncontrolled search path in some Intel(R) Processor Diagnostic Tool software before version 4.1.9.41 may allow an authenticated user to potentially enable escalation of privilege via local access.