CVEvulnerability
CVE-2019-11147
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-12-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
Insufficient access control in hardware abstraction driver for MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0, 14.0.10; TXEInfo software for Intel(R) TXE before versions 3.1.70 and 4.0.20; INTEL-SA-00086 Detection Tool version 1.2.7.0 or before; INTEL-SA-00125 Detection Tool version 1.0.45.0 or before may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected configurations
• intel intel-sa-00125 detection tool (<= 1.0.45.0)
• intel sa-00086 detection tool (<= 1.2.7.0)
• intel converged security management engine firmware (>= 11.0 < 11.8.70)
• intel converged security management engine firmware (>= 11.10 < 11.11.70)
• intel converged security management engine firmware (>= 11.20 < 11.22.70)
• intel converged security management engine firmware (>= 12.0 < 12.0.45)
• intel converged security management engine firmware (>= 13.0 < 13.0.0)
• intel converged security management engine firmware (>= 14.0.0 < 14.0.10)
• intel trusted execution engine firmware (>= 3.0 < 3.1.70)
• intel trusted execution engine firmware (>= 4.0 < 4.0.20)