PT-2019-3992 · Intel · Intel Proset/Wireless Wifi

Publicado 2019-11-12 · Atualizado 2021-07-21 · CVE-2019-11154

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) PROSet/Wireless WiFi Software versions prior to 21.40

Description The issue is related to improper directory permissions in the Intel(R) PROSet/Wireless WiFi Software, which may allow an authenticated user to potentially enable denial of service and information disclosure via local access. The vulnerability is associated with incorrect default permission settings, and its exploitation can lead to a denial of service and disclosure of protected information.

Recommendations For versions prior to 21.40, update to version 21.40 or later to resolve the issue.

Correção

Incorrect Permission

Incorrect Default Permissions

Improper Privilege Management

Enumeração de Fraquezas

CWE-732

CWE-276

CWE-269

Identificadores relacionados

BDU:2019-04523

CVE-2019-11154

Produtos afetados

Intel Proset/Wireless Wifi

Referências · 4

• https://bdu.fstec.ru/vul/2019-04523 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-11154 · Aviso do Fabricante
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00288.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-11154 · Nota de Segurança