CVE-2019-11154

Published: Nov 14, 2019Modified: Nov 21, 2024

7.1

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Exploitability: 1.8 / Impact: 5.2

Source: NVD

Description

Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable denial of service and information disclosure via local access.

Affected (1)

Products: Intel: Proset/wireless Wifi

Intel

1 product

Proset/wireless Wifi

Configuration A

1 vulnerable · 13 platform

Vulnerable Software	Affected Versions
Intel Proset/wireless Wifi	Before 21.40

Running on/with	Platform Versions
Intel Dual Band Wireless Ac 3165	All versions
Intel Dual Band Wireless Ac 3168	All versions
Intel Dual Band Wireless Ac 7265 (rev D)	All versions
Intel Dual Band Wireless Ac 8260	All versions
Intel Dual Band Wireless Ac 8265	All versions
Intel Dual Band Wireless N 7265 (rev D)	All versions
Intel Wi Fi 6 Ax200	All versions
Intel Wi Fi 6 Ax201	All versions
Intel Wireless Ac 9260	All versions
Intel Wireless Ac 9461	All versions
Intel Wireless Ac 9462	All versions
Intel Wireless Ac 9560	All versions
Intel Wireless 7265 (rev D)	All versions

Related CWEs

CWE-732

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00288.html

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00288.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.