NetSight
medium6.7

CVE-2019-11108

Insufficient input validation in subsystem for Intel(R) CSME before versions 12.0.45 and 13.0.10 may allow a privileged user to potentially enable escalation o…

Impact

Insufficient input validation in subsystem for Intel(R) CSME before versions 12.0.45 and 13.0.10 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

VendorProductAffected versions
IntelConverged Security Management Engine Firmware
from 12.0 before 12.0.45
from 13.0 before 13.0.10

Weakness classification

References