CVE-2019-0142
published 2019-11-14CVE-2019-0142: Insufficient access control in ilp60x64.sys driver for Intel(R) Ethernet 700 Series Controllers before version 1.33.0.0 may allow a privileged user to…
PriorityP431high8.2CVSS 3.1
AVLACLPRHUINSCCHIHAH
EPSS
0.33%
24.5th percentile
Insufficient access control in ilp60x64.sys driver for Intel(R) Ethernet 700 Series Controllers before version 1.33.0.0 may allow a privileged user to potentially enable escalation of privilege via local access.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| intel | ethernet_700_series_software | < 24.0 | 24.0 |
| intel | ethernet_controller_710-bm1_firmware | < 1.33.0.0 | 1.33.0.0 |
| intel | ethernet_controller_x710-at2_firmware | < 1.33.0.0 | 1.33.0.0 |
| intel | ethernet_controller_x710-bm2_firmware | < 1.33.0.0 | 1.33.0.0 |
| intel | ethernet_controller_x710-tm4_firmware | < 1.33.0.0 | 1.33.0.0 |
| intel | ethernet_controller_xxv710-am1_firmware | < 1.33.0.0 | 1.33.0.0 |
| intel | ethernet_controller_xxv710-am2_firmware | < 1.33.0.0 | 1.33.0.0 |
| paloalto | pan-os | — | — |
CVSS provenance
nvdv3.18.2HIGHCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Palo Alto
PAN
vendor_paloalto·2020-04-08·CVSS 6.7
CVE-2019-0139 [MEDIUM] PAN
PAN
Palo Alto Networks Product Security Assurance team has evaluated and determined that these third-party or open source vulnerabilities do not have a security impact on Palo Alto Networks Products, or the scenarios required for successful
CVEs: CVE-2019-0139, CVE-2019-0140, CVE-2019-0142, CVE-2019-0143, CVE-2019-0144, CVE-2019-0145, CVE-2019-0146, CVE-2019-0147, CVE-2019-0148, CVE-2019-0149, CVE-2019-0150, CVE-2019-11168, CVE-2019-11170, CVE-2019-11171, CVE-2019-11172, CVE-2019-11173, CVE-2019-11174, CVE-2019-11175, CVE-2019-11177, CVE-2019-11178, CVE-2019-11179, CVE-2019-11180, CVE-2019-11181, CVE-2019-11182, CVE-2019-12735, CVE-2019-16905, CVE-2020-0561, CVE-2020-0562, CVE-2020-0563, CVE-2020-0564
Affected products: PAN-OS
GHSA
GHSA-2vjr-3244-hj86: Insufficient access control in ilp60x64
ghsa_unreviewed·2022-05-24
CVE-2019-0142 [HIGH] CWE-269 GHSA-2vjr-3244-hj86: Insufficient access control in ilp60x64
Insufficient access control in ilp60x64.sys driver for Intel(R) Ethernet 700 Series Controllers before version 1.33.0.0 may allow a privileged user to potentially enable escalation of privilege via local access.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-11-14
Published