Intel Solid State Drive Toolbox vulnerabilities

3 CVEs affecting Intel Solid State Drive Toolbox, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-31199, published 2023-05-12.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-5688, published 2017-05-31. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. There is an escalation of privilege vulnerability in the Intel Solid State Drive Toolbox versions before 3.4.5 which allow a local administrative attacker to load and execute arbitrary code.
• CVE-2018-18097, published 2018-12-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper directory permissions in Intel Solid State Drive Toolbox before 3.5.7 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2023-31199, published 2023-05-12. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control in the Intel(R) Solid State Drive Toolbox(TM) before version 3.4.5 may allow a privileged user to potentially enable escalation of privilege via local access.