PT-2019-2371 · Intel · Intel Driver & Support Assistant

Published 2019-05-14 · Updated 2019-05-21 · CVE-2019-11114

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Intel Driver & Support Assistant versions 19.3.12.3 and earlier

Description The issue is caused by insufficient input validation, which may allow a privileged user to potentially enable denial of service via local access. This could result in a denial of service.

Recommendations For Intel Driver & Support Assistant versions 19.3.12.3 and earlier, update to a version later than 19.3.12.3 to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-02146

CVE-2019-11114

Affected Products

Intel Driver & Support Assistant

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-11114 · Security Note
• https://bdu.fstec.ru/vul/2019-02146 · Security Note
• https://osv.dev/vulnerability/CVE-2019-11114 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00252.html · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00252.html · Note