NetSight
medium6.7

CVE-2019-11110

Authentication bypass in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before version…

Impact

Authentication bypass in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

VendorProductAffected versions
IntelConverged Security Management Engine Firmware
from 11.0 before 11.8.70
from 11.10 before 11.11.70
from 11.20 before 11.22.70
from 12.0 before 12.0.45
from 13.0 before 13.0.10
from 14.0.0 before 14.0.10
IntelTrusted Execution Engine Firmware
from 3.0 before 3.1.70
from 4.0 before 4.0.20

References