CVE-2019-11162

3 documents3 sources
Severity
7.8HIGH
EPSS
0.0%
top 84.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Intel Computing Improvement Program
Timeline
PublishedAug 19
Latest updateMay 24

Description

Insufficient access control in hardware abstraction in SEMA driver for Intel(R) Computing Improvement Program before version 2.4.0.04733 may allow an authenticated user to potentially enable escalation of privilege, denial of service or information disclosure via local access.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5intel(r)_computing_improvement_program_advisoryVersions before 2.4.0.04733

Patches

Patch: www.intel.com ↗Patch: www.intel.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-q646-865j-3hx6: Insufficient access control in hardware abstraction in SEMA driver for Intel(R) Computing Improvement Program before version 2↗2022-05-24
▶
CVEList
CVE-2019-11162: Insufficient access control in hardware abstraction in SEMA driver for Intel(R) Computing Improvement Program before version 2↗2019-08-19
▶