CVE-2019-11133

EUVD-2019-2837
Improper access control in the Intel(R) Processor Diagnostic Tool before version 4.1.2.24 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 24%
Affected Products (NVD)
VendorProductVersion
intelprocessor_diagnostic_tool
𝑥
< 4.1.2.24
𝑥
= Vulnerable software versions
References
http://www.securityfocus.com/bid/109096
https://support.f5.com/csp/article/K90305959
https://support.f5.com/csp/article/K90305959?utm_source=f5support&amp%3Butm_medium=RSS
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00268.html
http://www.securityfocus.com/bid/109096
https://support.f5.com/csp/article/K90305959
https://support.f5.com/csp/article/K90305959?utm_source=f5support&amp%3Butm_medium=RSS
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00268.html