CVE-2019-11104

2019-12-1821:08:17

intel

www.cve.org

AI Score

8.3

Confidence

High

EPSS

Percentile

12.6%

JSON

Insufficient input validation in MEInfo software for Intel® CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel® TXE before versions 3.1.70 and 4.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access.

CNA Affected

[
  {
    "product": "Intel(R) CSME",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "See provided reference"
      }
    ]
  }
]