Detections
Analytics

Intel Rapid Storage Technology Privilege Escalation (INTEL-SA-01298)

medium Nessus Plugin ID 266407

Language:

Synopsis

Rapid Storage Technology software installed on the remote Windows host is affected by a privilege escalation vulnerability.

Description

Intel Rapid Storage Technology is installed on the remote Windows host. It is, therefore, affected by an escalation of privilege vulnerability. Improper access control for some Intel(R) Rapid Storage Technology installation software may allow an authenticated user to potentially enable escalation of privilege via local access.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Update Intel Rapid Storage Technology software to 19.5.8.1059, 20.2.1.1016 or later

See Also

http://www.nessus.org/u?565149c9

Plugin Details

Severity: Medium

ID: 266407

File Name: intel_rapid_storage_technology_sa-01298.nasl

Version: 1.1

Type: local

Agent: windows

Family: Windows

Published: 10/2/2025

Updated: 10/2/2025

Configuration: Enable thorough checks (optional)

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 6

Vector: CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2025-20099

CVSS v3

Risk Factor: Medium

Base Score: 6.7

Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: cpe:/a:intel:rapid_storage_technology

Required KB Items: SMB/Registry/Enumerated, installed_sw/Intel Rapid Storage Technology installer

Patch Publication Date: 8/12/2025

Vulnerability Publication Date: 8/12/2025

Reference Information

CVE: CVE-2025-20099

IAVA: 2025-A-0589