Vulnerability Details CVE-2019-11108
Insufficient input validation in subsystem for Intel(R) CSME before versions 12.0.45 and 13.0.10 may allow a privileged user to potentially enable escalation of privilege via local access.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 37.1%
CVSS Severity
CVSS v3 Score 6.7
CVSS v2 Score 4.6
References
Products affected by CVE-2019-11108
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:12.0
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:12.0.0
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:12.0.10
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:12.0.20
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:12.0.35
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:12.0.5
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:13.0
-
cpe:2.3:o:intel:converged_security_management_engine_firmware:13.0.0