« Volver al listado

CVE-2019-11102

Estado: ModificadaMedia (4.4)—

Insufficient input validation in Intel(R) DAL software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Intel — Dynamic Application LoaderIntel — Trusted Execution Engine Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-11102",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.4,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@intel.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Intel(R) DAL software for Intel(R) CSME",
          "versions": [
            {
              "status": "affected",
              "version": "See provided reference"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-12-18T22:15:12.567",
  "references": [
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secure@intel.com"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Insufficient input validation in Intel(R) DAL software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access."
    },
    {
      "lang": "es",
      "value": "Una comprobación de entrada insuficiente en el software Intel® DAL para Intel® CSME versiones anteriores a 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 y 14.0.10; Intel® TXE versiones anteriores a 3.1.70 y 4.0.20, puede permitir a un usuario privilegiado habilitar una divulgación de información por medio de un acceso local."
    }
  ],
  "lastModified": "2026-06-17T02:12:18.720",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:intel:dynamic_application_loader:*:*:*:*:*:converged_security_management_engine_firmware:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8DE9196B-C1AA-4BA1-BF40-199D8394AEB2",
              "versionEndExcluding": "11.8.70",
              "versionStartIncluding": "11.0"
            },
            {
              "criteria": "cpe:2.3:a:intel:dynamic_application_loader:*:*:*:*:*:converged_security_management_engine_firmware:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F0584F8-00C3-483B-B3AA-7C644038E310",
              "versionEndExcluding": "11.11.70",
              "versionStartIncluding": "11.10"
            },
            {
              "criteria": "cpe:2.3:a:intel:dynamic_application_loader:*:*:*:*:*:converged_security_management_engine_firmware:*:*",
              "vulnerable": true,
              "matchCriteriaId": "26201E59-A48A-4114-AA5F-482F41AE229D",
              "versionEndExcluding": "11.22.70",
              "versionStartIncluding": "11.20"
            },
            {
              "criteria": "cpe:2.3:a:intel:dynamic_application_loader:*:*:*:*:*:converged_security_management_engine_firmware:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2C42ACD5-F079-435A-8B0F-155CB30F65A2",
              "versionEndExcluding": "12.0.45",
              "versionStartIncluding": "12.0"
            },
            {
              "criteria": "cpe:2.3:a:intel:dynamic_application_loader:*:*:*:*:*:converged_security_management_engine_firmware:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7138AEFA-1400-4C79-BC90-CCA74BACD818",
              "versionEndExcluding": "13.0.10",
              "versionStartIncluding": "13.0"
            },
            {
              "criteria": "cpe:2.3:a:intel:dynamic_application_loader:*:*:*:*:*:converged_security_management_engine_firmware:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EBF7B680-A95C-4934-A763-5560782E7ABB",
              "versionEndExcluding": "14.0.10",
              "versionStartIncluding": "14.0.0"
            },
            {
              "criteria": "cpe:2.3:o:intel:trusted_execution_engine_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD17A8EA-F595-4E4E-B694-FE07544E7945",
              "versionEndExcluding": "3.1.70",
              "versionStartIncluding": "3.0"
            },
            {
              "criteria": "cpe:2.3:o:intel:trusted_execution_engine_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BCB9B3C-C83A-4563-80F6-3AA50C16A118",
              "versionEndExcluding": "4.0.20",
              "versionStartIncluding": "4.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@intel.com"
}