Not rated
CVE-2019-11147 Insufficient access control in hardware abstraction driver for MEInfo software for Intel(R) CSME before versions…
Description
Insufficient access control in hardware abstraction driver for MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0, 14.0.10; TXEInfo software for Intel(R) TXE before versions 3.1.70 and 4.0.20; INTEL-SA-00086 Detection Tool version 1.2.7.0 or before; INTEL-SA-00125 Detection Tool version 1.0.45.0 or before may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Intel(R) CSME | Versions not published |
Other CVEs of Intel(R) CSME
The 19 CVEs of Intel(R) CSME →
CVE-2023-34424
Improper input validation in firmware for some Intel(R) CSME may allow a privileged user to potentially enable denial of…
4.4
Medium
CVE-2024-21844
Integer overflow in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable denial of…
4.3
Medium
CVE-2023-48361
Improper initialization in firmware for some Intel(R) CSME may allow a privileged user to potentially enable information…
2.3
Low
CVE-2023-40067
Unchecked return value in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable…
5.7
Medium