CVE-2019-11147

HIGH

7.8

Description

Insufficient access control in hardware abstraction driver for MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0, 14.0.10; TXEInfo software for Intel(R) TXE before versions 3.1.70 and 4.0.20; INTEL-SA-00086 Detection Tool version 1.2.7.0 or before; INTEL-SA-00125 Detection Tool version 1.0.45.0 or before may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE Details

CVSS v3.1 Score7.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published12/18/2019

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

intel:converged_security_management_engine_firmwareintel:intel-sa-00125_detection_toolintel:sa-00086_detection_toolintel:trusted_execution_engine_firmware

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html(secure@intel.com)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.