Vulnerability Details CVE-2016-1493
Intel Driver Update Utility before 2.4 retrieves driver updates in cleartext, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.3%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 7.6
References
- http://packetstormsecurity.com/files/135314/Intel-Driver-Update-Utility-2.2.0.5-Man-In-The-Middle.html
- http://seclists.org/fulldisclosure/2016/Jan/56
- http://www.coresecurity.com/advisories/intel-driver-update-utility-mitm
- http://www.securityfocus.com/archive/1/537327/100/0/threaded
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00048&languageid=en-fr
- http://packetstormsecurity.com/files/135314/Intel-Driver-Update-Utility-2.2.0.5-Man-In-The-Middle.html
- http://seclists.org/fulldisclosure/2016/Jan/56
- http://www.coresecurity.com/advisories/intel-driver-update-utility-mitm
- http://www.securityfocus.com/archive/1/537327/100/0/threaded
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00048&languageid=en-fr
Products affected by CVE-2016-1493
-
cpe:2.3:a:intel:driver_update_utility:2.0
-
cpe:2.3:a:intel:driver_update_utility:2.1
-
cpe:2.3:a:intel:driver_update_utility:2.2
-
cpe:2.3:a:intel:driver_update_utility:2.3