Insufficient Input Validation Issue in Intel CSME and TXE
CVE-2019-11101

4.4MEDIUM

Key Information:

Vendor
Intel
Status
Intel(r) Csme, Intel(r) Txe
Vendor
CVE Published:
18 December 2019

Summary

Insufficient input validation in the Intel CSME and TXE subsystems may allow a privileged user to exploit this weakness. This vulnerability enables the potential for information disclosure if local access is obtained, emphasizing the need for prompt updates to affected versions to mitigate the risks.

Affected Version(s)

Intel(R) CSME, Intel(R) TXE See provided reference

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.