Vulnerability Details CVE-2019-11106
Insufficient session validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 33.8%
CVSS Severity
CVSS v3 Score 6.7
CVSS v2 Score 4.6
References
Products affected by CVE-2019-11106
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:11.0
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:11.8.50
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:11.8.55
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:11.8.60
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:11.8.65
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:12.0
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:12.0.0
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:12.0.10
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:12.0.20
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:12.0.35
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:12.0.5
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:13.0
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:13.0.0
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:14.0.0
-
cpe:2.3:o:intel:trusted_execution_engine_firmware:3.0
-
cpe:2.3:o:intel:trusted_execution_engine_firmware:3.1.50
-
cpe:2.3:o:intel:trusted_execution_engine_firmware:3.1.60
-
cpe:2.3:o:intel:trusted_execution_engine_firmware:3.1.65
-
cpe:2.3:o:intel:trusted_execution_engine_firmware:4.0
-
cpe:2.3:o:intel:trusted_execution_engine_firmware:4.0.10
-
cpe:2.3:o:intel:trusted_execution_engine_firmware:4.0.15
-
cpe:2.3:o:intel:trusted_execution_engine_firmware:4.0.5