PT-2019-4064 · Intel · Intel Proset/Wireless Wifi

Published 2019-11-12 · Updated 2021-07-21 · CVE-2019-11155

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel PROSet/Wireless WiFi Software versions prior to 21.40

Description The issue is related to improper default permission settings in the utility for connecting to the network. It may allow an authenticated user to potentially enable denial of service and information disclosure via local access.

Recommendations For versions prior to 21.40, update to version 21.40 or later to resolve the issue.

Fix

Incorrect Permission

Incorrect Default Permissions

Weakness Enumeration

CWE-732

CWE-276

Related Identifiers

BDU:2019-04625

CVE-2019-11155

Affected Products

Intel Proset/Wireless Wifi

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-11155 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00288.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-04625 · Security Note
• https://osv.dev/vulnerability/CVE-2019-11155 · Vendor Advisory