{"id":"CVE-2018-3703","aliases":["EUVD-2018-15557","GHSA-g8cj-jqcx-5mxf"],"status":"published","title":"Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows...","description":"Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00277,"percentile":0.20224,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-732"],"published":"2019-01-10T20:00:00Z","modified":"2026-06-17T01:57:41Z","products":[{"vendor":"intel","product":"ssd_data_center_tool"},{"vendor":"intel corporation","product":"intel(r) ssd data center tool for windows"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00207.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3703"},{"url":"https://github.com/advisories/GHSA-g8cj-jqcx-5mxf"}],"sources":{"cve":[{"id":"CVE-2018-3703","description":"Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access.","status":"published","published":"2019-01-10T20:00:00Z","modified":"2024-09-16T16:28:06.609Z","updated_at":"2026-11-02T14:35:05.262903Z"}],"euvd":[{"id":"EUVD-2018-15557","description":"Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access.","status":"published","published":"2019-01-10T20:00:00Z","modified":"2024-09-16T16:28:06Z","updated_at":"2026-11-03T00:55:51.557415Z"}],"ghsa":[{"id":"GHSA-g8cj-jqcx-5mxf","title":"Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows...","description":"Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access.","status":"published","published":"2022-05-13T01:52:35Z","modified":"2023-02-02T05:02:12Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:51:22.87233Z"}],"nvd":[{"id":"CVE-2018-3703","description":"Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access.","status":"published","published":"2019-01-10T20:29:00.47Z","modified":"2026-06-17T01:57:41.863Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:04:53.079938Z"}]}}