Snow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and versions that may be deployed and in use across an IT environment. A privilege-escalation vulnerability exists if CPUID is enabled, and thus it should be disabled via configuration settings.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Snow_inventory_agent | Snowsoftware | 5.3.1 (including) | 6.7.0 (including) |