Skip to content
fr Sign in
Not rated

CVE-2019-11104 Insufficient input validation in MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45,…

Description

Insufficient input validation in MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products and versions

Product Affected versions Fixed in
Intel(R) CSME Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Intel(R) CSME

The 19 CVEs of Intel(R) CSME →
CVE-2023-34424 Improper input validation in firmware for some Intel(R) CSME may allow a privileged user to potentially enable denial of… 4.4 Medium CVE-2024-21844 Integer overflow in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable denial of… 4.3 Medium CVE-2023-48361 Improper initialization in firmware for some Intel(R) CSME may allow a privileged user to potentially enable information… 2.3 Low CVE-2023-40067 Unchecked return value in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable… 5.7 Medium
Track this CVE