CVE-2024-28172

5.4 mediumEPSS 0.1%

Medium (5.4) in intel. EPSS 0.1% chance of exploitation in the next 30 days.

Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Severity

CVSS 4.0

5.4 medium

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.3 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
CWE: CWE-427
Published: 2024-08-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

intel:oneapi_hpc_toolkit
intel:trace_analyzer_and_collector

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01117.html

Check your stack JSON