CVE-2019-11105

Published: Dec 18, 2019Modified: Nov 21, 2024

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Logic issue in subsystem for Intel(R) CSME before versions 12.0.45, 13.0.10 and 14.0.10 may allow a privileged user to potentially enable escalation of privilege and information disclosure via local access.

Affected (3)

Products: Intel: Converged Security Management Engine Firmware

Intel

1 product

Converged Security Management Engine Firmware

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Intel Converged Security Management Engine Firmware	From 12.0 to 12.0.45
Intel Converged Security Management Engine Firmware	From 13.0 to 13.0.10
Intel Converged Security Management Engine Firmware	From 14.0.0 to 14.0.10

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.