CVE-2019-11162 : Insufficient access control in hardware abstraction in SEMA driver for Intel(R)

Insufficient access control in hardware abstraction in SEMA driver for Intel(R) Computing Improvement Program before version 2.4.0.04733 may allow an authenticated user to potentially enable escalation of privilege, denial of service or information disclosure via local access.

Published 2019-08-19 17:15:12

Updated 2020-08-24 17:37:01

Source Intel Corporation

View at NVD, CVE.org

Vulnerability category: Denial of serviceInformation leak

Products affected by CVE-2019-11162

Intel » Computing Improvement Program
Versions before (<) 2.4.0.04733
cpe:2.3:a:intel:computing_improvement_program:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2019-11162

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 10 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-11162

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2019-11162

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00283.html

INTEL-SA-00283
Patch;Vendor Advisory

Jump to

Vulnerability Details : CVE-2019-11162

Products affected by CVE-2019-11162

Exploit prediction scoring system (EPSS) score for CVE-2019-11162

CVSS scores for CVE-2019-11162

References for CVE-2019-11162