CVE-2019-11110

3 documents3 sources
Severity
6.7MEDIUM
EPSS
0.1%
top 77.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 18
Latest updateMay 24

Description

Authentication bypass in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-38m6-gw8w-cmvr: Authentication bypass in the subsystem for Intel(R) CSME before versions 112022-05-24
CVEList
CVE-2019-11110: Authentication bypass in the subsystem for Intel(R) CSME before versions 112019-12-18
CVE-2019-11110 (MEDIUM CVSS 6.7) | Authentication bypass in the subsys | cvebase.io