PT-2019-3846 · Intel · Intel(R) Txe+2
Published
2019-11-12
·
Updated
2020-01-02
·
CVE-2019-11102
CVSS v3.1
4.4
Medium
| Vector | AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Intel(R) DAL software for Intel(R) CSME versions prior to 11.8.70
Intel(R) DAL software for Intel(R) CSME versions prior to 11.11.70
Intel(R) DAL software for Intel(R) CSME versions prior to 11.22.70
Intel(R) DAL software for Intel(R) CSME versions prior to 12.0.45
Intel(R) DAL software for Intel(R) CSME versions prior to 13.0.10
Intel(R) DAL software for Intel(R) CSME versions prior to 14.0.10
Intel(R) TXE versions prior to 3.1.70
Intel(R) TXE versions prior to 4.0.20
Description
The issue is related to insufficient input validation in the Intel(R) DAL software for Intel(R) CSME and Intel(R) TXE, which may allow a privileged user to potentially enable information disclosure via local access. This could allow an attacker to disclose protected information.
Recommendations
For Intel(R) DAL software for Intel(R) CSME versions prior to 11.8.70, update to version 11.8.70 or later.
For Intel(R) DAL software for Intel(R) CSME versions prior to 11.11.70, update to version 11.11.70 or later.
For Intel(R) DAL software for Intel(R) CSME versions prior to 11.22.70, update to version 11.22.70 or later.
For Intel(R) DAL software for Intel(R) CSME versions prior to 12.0.45, update to version 12.0.45 or later.
For Intel(R) DAL software for Intel(R) CSME versions prior to 13.0.10, update to version 13.0.10 or later.
For Intel(R) DAL software for Intel(R) CSME versions prior to 14.0.10, update to version 14.0.10 or later.
For Intel(R) TXE versions prior to 3.1.70, update to version 3.1.70 or later.
For Intel(R) TXE versions prior to 4.0.20, update to version 4.0.20 or later.
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Intel(R) Csme
Intel(R) Dal
Intel(R) Txe