high7.8
CVE-2019-11103
Insufficient input validation in firmware update software for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow an authenticated user to pote…
Impact
Insufficient input validation in firmware update software for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Converged Security Management Engine Firmware | from 12.0 before 12.0.45 from 13.0 before 13.0.10 from 14.0.0 before 14.0.10 |