PT-2019-4064 · Intel · Intel Proset/Wireless Wifi

Publicado 2019-11-12 · Atualizado 2021-07-21 · CVE-2019-11155

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel PROSet/Wireless WiFi Software versions prior to 21.40

Description The issue is related to improper default permission settings in the utility for connecting to the network. It may allow an authenticated user to potentially enable denial of service and information disclosure via local access.

Recommendations For versions prior to 21.40, update to version 21.40 or later to resolve the issue.

Correção

Incorrect Permission

Incorrect Default Permissions

Enumeração de Fraquezas

CWE-732

CWE-276

Identificadores relacionados

BDU:2019-04625

CVE-2019-11155

Produtos afetados

Intel Proset/Wireless Wifi

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-11155 · Nota de Segurança
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00288.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-04625 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-11155 · Aviso do Fabricante