PT-2019-3991 · Intel · Intel Proset/Wireless Wifi

Published 2019-11-12 · Updated 2021-07-21 · CVE-2019-11156

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel PROSet/Wireless WiFi Software versions prior to 21.40

Description The issue is related to insecure privilege management in the Intel PROSet/Wireless WiFi utility, which may allow an attacker to escalate privileges, cause a denial of service, and disclose protected information. This can be achieved by an authenticated user via local access.

Recommendations For versions prior to 21.40, update to version 21.40 or later to resolve the issue.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2019-04522

CVE-2019-11156

Affected Products

Intel Proset/Wireless Wifi

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-11156 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00288.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-11156 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-04522 · Security Note