Intel Rapid Storage Technology vulnerabilities

6 CVEs affecting Intel Rapid Storage Technology, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-39230, published 2023-11-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-0104, published 2021-06-09. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Uncontrolled search path element in the installer for the Intel(R) Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 and 18.1.0.24, may allow an authenticated user to…
CVE-2018-3635, published 2018-11-14. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of…
CVE-2019-14568, published 2019-12-16. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper permissions in the executable for Intel(R) RST before version 17.7.0.1006 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2018-12131, published 2018-10-10. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Permissions in the driver pack installers for Intel NVMe before version 4.0.0.1007 and Intel RSTe before version 4.7.0.2083 may allow an authenticated user to potentially escalate privilege via local…
CVE-2023-39230, published 2023-11-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Insecure inherited permissions in some Intel Rapid Storage Technology software before version 16.8.5.1014.9 may allow an authenticated user to potentially enable escalation of privilege via local…
CVE-2022-43456, published 2023-08-11. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Uncontrolled search path in some Intel(R) RST software before versions 16.8.5.1014.5, 17.11.3.1010.2, 18.7.6.1011.2 and 19.5.2.1049.5 may allow an authenticated user to potentially enable escalation…