CVE-2019-0142

published 2019-11-14

CVE-2019-0142: Insufficient access control in ilp60x64.sys driver for Intel(R) Ethernet 700 Series Controllers before version 1.33.0.0 may allow a privileged user to…

high 8.2 CVSS 3.1

AV L AC L PR H UI N S C C H I H A H

Insufficient access control in ilp60x64.sys driver for Intel(R) Ethernet 700 Series Controllers before version 1.33.0.0 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
intel	ethernet_700_series_software	< 24.0	24.0
intel	ethernet_controller_710-bm1_firmware	< 1.33.0.0	1.33.0.0
intel	ethernet_controller_x710-at2_firmware	< 1.33.0.0	1.33.0.0
intel	ethernet_controller_x710-bm2_firmware	< 1.33.0.0	1.33.0.0
intel	ethernet_controller_x710-tm4_firmware	< 1.33.0.0	1.33.0.0
intel	ethernet_controller_xxv710-am1_firmware	< 1.33.0.0	1.33.0.0
intel	ethernet_controller_xxv710-am2_firmware	< 1.33.0.0	1.33.0.0
paloalto	pan-os	—	—

CWE-269