漏洞关键信息 Intel ID Intel-SA-01323 漏洞类别 Software 漏洞影响 Escalation of Privilege 漏洞严重性评级 MEDIUM 漏洞详情 CVE-2025-22849 - 描述: Incorrect default permissions for the Intel® Optane™ PMem management software before versions CR_MGMT_01.00.00.3584, CR_MGMT_02.00.00.4052, CR_MGMT_03.00.00.0538 within Ring 3: User Applications may allow an escalation of privilege. - CVSS 4.0: 5.4 Medium (AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) - CVSS 3.1: 6.7 Medium (AVL/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) CVE-2025-20070 - 描述: Improper conditions check for the Intel® Optane™ PMem management software before versions CR_MGMT_02.00.00.4052, CR_MGMT_03.00.00.0538 within Ring 3: User Applications may allow an escalation of privilege. - CVSS 4.0: 5.4 Medium (AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) - CVSS 3.1: 6.7 Medium (AVL/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) 受影响的产品 Intel® Optane™ PMem management software before versions CR_MGMT_01.00.00.3584, CR_MGMT_02.00.00.4052, CR_MGMT_03.00.00.0538. 推荐措施 更新至版本 CR_MGMT_01.00.00.3584, CR_MGMT_02.00.00.4052, CR_MGMT_03.00.00.0538 或更高版本。 下载链接: https://github.com/intel/ipmctl/releases 致谢 感谢 @sim0nsecurity (CVE-2025-20070) 和 Mohamed Amine Saidani (CVE-2025-22849) 报告这些问题。 修订历史 版本 1.0: 2026-02-10 - 初始发布