Read the docs
TI-2017-03678 Aliases CVE-2017-5682GHSA-5w4p-vh66-47f5

Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio…

Priority LOW 34Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library, and Intel Threading Building Blocks before 2017 Update 2 allows an attacker to launch a process with escalated privileges.

Why it matters now

EPSS 0.00973 62nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library, Intel Threading Building Blocks Before 2017 Update 2Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library, Intel Threading Building Blocks Before 2017 Update 2—No fix listedCNA
  • Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library, Intel Threading Building Blocks Before 2017 Update 2 Vendor— Affected Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library, Intel Threading Building Blocks Before 2017 Update 2 Fixed in — No fix listed CNA

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:a:intel:advisor:2017:*:*:*:*:*:*:*2017VulnerableIntel
cpe:2.3:a:intel:cryptography_for_intel_integrated_performance_primitives:2017:*:*:*:*:*:*:*2017VulnerableIntel
cpe:2.3:a:intel:data_analytics_acceleration_library:2017:*:*:*:*:*:*:*2017VulnerableIntel
cpe:2.3:a:intel:inspector:2017:*:*:*:*:*:*:*2017VulnerableIntel
cpe:2.3:a:intel:integrated_performance_primitives:2017:*:*:*:*:*:*:*2017VulnerableIntel
cpe:2.3:a:intel:math_kernel_library:2017:*:*:*:*:*:*:*2017VulnerableIntel
cpe:2.3:a:intel:mpi_library:2017:*:*:*:*:*:*:*2017VulnerableIntel
cpe:2.3:a:intel:parallel_studio_xe:2017:*:*:*:*:*:*:*2017VulnerableIntel
cpe:2.3:a:intel:system_studio:2017:*:*:*:*:*:*:*2017VulnerableIntel
cpe:2.3:a:intel:threading_building_blocks:2017:*:*:*:*:*:*:*2017VulnerableIntel
  • cpe:2.3:a:intel:advisor:2017:*:*:*:*:*:*:* Versions 2017 Vulnerable ·Intel
  • cpe:2.3:a:intel:cryptography_for_intel_integrated_performance_primitives:2017:*:*:*:*:*:*:* Versions 2017 Vulnerable ·Intel
  • cpe:2.3:a:intel:data_analytics_acceleration_library:2017:*:*:*:*:*:*:* Versions 2017 Vulnerable ·Intel
  • cpe:2.3:a:intel:inspector:2017:*:*:*:*:*:*:* Versions 2017 Vulnerable ·Intel
  • cpe:2.3:a:intel:integrated_performance_primitives:2017:*:*:*:*:*:*:* Versions 2017 Vulnerable ·Intel
  • cpe:2.3:a:intel:math_kernel_library:2017:*:*:*:*:*:*:* Versions 2017 Vulnerable ·Intel
  • cpe:2.3:a:intel:mpi_library:2017:*:*:*:*:*:*:* Versions 2017 Vulnerable ·Intel
  • cpe:2.3:a:intel:parallel_studio_xe:2017:*:*:*:*:*:*:* Versions 2017 Vulnerable ·Intel
  • cpe:2.3:a:intel:system_studio:2017:*:*:*:*:*:*:* Versions 2017 Vulnerable ·Intel
  • cpe:2.3:a:intel:threading_building_blocks:2017:*:*:*:*:*:*:* Versions 2017 Vulnerable ·Intel
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:intel:trace_analyzer_and_collector:2017:*:*:*:*:*:*:*2017VulnerableIntel
cpe:2.3:a:intel:vtune_amplifier:2017:*:*:*:*:*:*:*2017VulnerableIntel
  • cpe:2.3:a:intel:trace_analyzer_and_collector:2017:*:*:*:*:*:*:* Versions 2017 Vulnerable ·Intel
  • cpe:2.3:a:intel:vtune_amplifier:2017:*:*:*:*:*:*:* Versions 2017 Vulnerable ·Intel

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-5682
  2. 2026-10-03 Alias added: GHSA-5w4p-vh66-47f5

References

Advisory 1

  • TI-2022-05534 Insufficient control flow management in the Intel(R) Advisor software before version… CVSS 3.1HIGH 7.8
  • TI-2021-05935 Improper access control in the Intel(R) Advisor software before version 2021.2 may allow… CVSS 3.1HIGH 7.8
  • TI-2024-14456 Uncontrolled search path in Intel Advisor software CVSS 3.1HIGH 7.8
  • TI-2023-17572 Improper access control in Intel oneAPI DPC++/C++ Compiler software CVSS 3.1HIGH 7.8
  • TI-2023-08617 Uncontrolled search path in Intel oneAPI Toolkit and component software installers CVSS 3.1HIGH 7.8
  • TI-2021-12706 Incorrect default permissions in Intel Advisor CVSS 3.1HIGH 7.8
See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences