{"id":"CVE-2018-12160","aliases":["EUVD-2018-4138","GHSA-wgg2-9vvc-4wxr"],"status":"published","title":"DLL injection vulnerability in software installer for Intel Data Center Migration Center Software...","description":"DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access.","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00432,"percentile":0.37666,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-276","CWE-427"],"published":"2018-09-12T19:00:00Z","modified":"2026-06-17T01:37:14Z","products":[{"vendor":"intel","product":"data_migration_software"},{"vendor":"intel corporation","product":"intel(r) data migration software"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00170.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12160"},{"url":"https://github.com/advisories/GHSA-wgg2-9vvc-4wxr"}],"sources":{"cve":[{"id":"CVE-2018-12160","description":"DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access.","status":"published","published":"2018-09-12T19:00:00Z","modified":"2024-09-16T19:15:39.667Z","updated_at":"2026-11-02T14:35:06.679212Z"}],"euvd":[{"id":"EUVD-2018-4138","description":"DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access.","status":"published","published":"2018-09-12T19:00:00Z","modified":"2024-09-16T19:15:39Z","updated_at":"2026-11-03T00:55:24.732716Z"}],"ghsa":[{"id":"GHSA-wgg2-9vvc-4wxr","title":"DLL injection vulnerability in software installer for Intel Data Center Migration Center Software...","description":"DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access.","status":"published","published":"2022-05-13T01:18:59Z","modified":"2023-02-01T05:05:42Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:50:16.372723Z"}],"nvd":[{"id":"CVE-2018-12160","description":"DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access.","status":"published","published":"2018-09-12T19:29:01.323Z","modified":"2026-06-17T01:37:14.39Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-276","CWE-427"],"updated_at":"2026-11-02T14:04:38.672108Z"}]}}