TI-2018-02705 Aliases CVE-2018-3703 GHSA-g8cj-jqcx-5mxf

Incorrect permission assignment in Intel SSD Data Center Tool for Windows

LOW 34CWE-732Published 2019-01-10 · Updated 2024-09-16

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access.

Why it matters now

EPSS 0.00277 20th percentileScored 2026-11-07

Fix Fixed Intel(R) SSD Data Center Tool for Windows (Intel Corporation): v3.0.17.

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Intel	Intel(R) SSD Data Center Tool for Windows	before v3.0.17.	v3.0.17.	Patch available	CNA

Intel(R) SSD Data Center Tool for Windows VendorIntel Affected before v3.0.17. Fixed in v3.0.17. Patch available CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:intel:ssd_data_center_tool::::::::	before 3.0.17	Vulnerable	Intel
cpe:2.3:o:microsoft:windows:-:::::::*	not specified by NVD	Running on	Microsoft

cpe:2.3:a:intel:ssd_data_center_tool:*:*:*:*:*:*:*:* Versions before 3.0.17 Vulnerable ·Intel
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft

Remediation

Fix · CNA Intel(R) SSD Data Center Tool for Windows (Intel Corporation) Fixed in v3.0.17.

Timeline

2026-10-02 Threatist record created from CVE-2018-3703
2026-10-03 Alias added: GHSA-g8cj-jqcx-5mxf

References

Patch 1

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00207.html

TI-2021-00054 Incorrect default permissions in Intel SSD Data Center Tool, versions downloaded CVSS 3.1HIGH 7.8
TI-2020-07023 Improper access control in the installer for Intel(R) SSD DCT versions before 3.0.23 may… CVSS 3.1MEDIUM 6.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences