CVE-2019-11086

MEDIUM

Intel Active Management Technology Firmware 12.0-12.0.45 - Unauthenticated Privilege Escalation via Physical Access

Title source: llm

Description

Insufficient input validation in subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html

Scores

CVSS v3 6.8

EPSS 0.0014

EPSS Percentile 33.7%

Attack Vector PHYSICAL

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-20

Status published

Products (1)

intel/active_management_technology_firmware 12.0 - 12.0.45

Published Dec 18, 2019

Tracked Since Feb 18, 2026