Insufficient Access Control in Intel Ethernet 700 Series Controllers Driver
CVE-2019-0142

8.2HIGH

Key Information:

Vendor
Intel
Status
2019.2 Ipu – Intel(r) Ethernet 700 Series Controllers
Vendor
CVE Published:
14 November 2019

Summary

A flaw in the ilp60x64.sys driver used for Intel Ethernet 700 Series Controllers prior to version 1.33.0.0 leads to insufficient access control. This vulnerability allows a privileged user to potentially exploit local access and escalate their permissions, posing significant security risks for affected systems. Addressing this issue is crucial for maintaining system integrity and preventing unauthorized access.

Affected Version(s)

2019.2 IPU – Intel(R) Ethernet 700 Series Controllers See provided reference

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.