CVEvulnerability
CVE-2019-0128
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-06-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Improper permissions in the installer for Intel(R) Chipset Device Software (INF Update Utility) before version 10.1.1.45 may allow an authenticated user to escalate privilege via local access.
Affected configurations
• intel chipset device software (< 10.1.1.45)
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/108767 Broken Link, Third Party Advisory, VDB Entry
- https://support.lenovo.com/us/en/product_security/LEN-27840 Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00224.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/108767 Broken Link, Third Party Advisory, VDB Entry
- https://support.lenovo.com/us/en/product_security/LEN-27840 Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00224.html Patch, Vendor Advisory