Vulnerability in Intel 62x Chipset
CVE-2019-11120
Insufficient path checking in the installer for Intel(R) Active System Console before version 8.0 Build 24 may allow an authenticated user to potentially enable escalation of privilege via local access.
EPSS: 0.003 (26.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Intel 62x_chipset
- Intel Active_system_console — versions 8.0
- Intel® Active System Console Advisory — versions before version 8.0 Build 24
References
- secure@intel.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-11120?
- CVE-2019-11120 is a high-severity vulnerability in Intel 62x Chipset. CVSS score: 7.8/10. Published 2019-10-11.
- How severe is CVE-2019-11120?
- High severity. CVSS v3 base score is 7.8 out of 10.