CVE-2019-11103

HIGH

Intel CSME Firmware 12.0-12.0.45 Privilege Escalation via Firmware Update

Title source: llm

Description

Insufficient input validation in firmware update software for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow an authenticated user to potentially enable escalation of privilege via local access.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html

Scores

CVSS v3 7.8

EPSS 0.0014

EPSS Percentile 33.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-20

Status published

Products (1)

intel/converged_security_management_engine_firmware 12.0 - 12.0.45

Published Dec 18, 2019

Tracked Since Feb 18, 2026