Lucene search

[email protected]CVE-2019-0142

HistoryNov 14, 2019 - 7:15 p.m.

CVE-2019-0142

2019-11-1419:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2019-0142

access control

intel ethernet

privilege escalation

local access

security vulnerability

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

8 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

11.7%

JSON

Insufficient access control in ilp60x64.sys driver for Intel® Ethernet 700 Series Controllers before version 1.33.0.0 may allow a privileged user to potentially enable escalation of privilege via local access.

CPENameOperatorVersion
intel:ethernet_controller_x710-tm4_firmwareintel ethernet controller x710-tm4 firmwarelt1.33.0.0
intel:ethernet_controller_x710-at2_firmwareintel ethernet controller x710-at2 firmwarelt1.33.0.0
intel:ethernet_controller_xxv710-am2_firmwareintel ethernet controller xxv710-am2 firmwarelt1.33.0.0
intel:ethernet_controller_xxv710-am1_firmwareintel ethernet controller xxv710-am1 firmwarelt1.33.0.0
intel:ethernet_controller_x710-bm2_firmwareintel ethernet controller x710-bm2 firmwarelt1.33.0.0
intel:ethernet_controller_710-bm1_firmwareintel ethernet controller 710-bm1 firmwarelt1.33.0.0
intel:ethernet_700_series_softwareintel ethernet 700 series softwarelt24.0

CPE	Name	Operator	Version
intel:ethernet_controller_x710-tm4_firmware	intel ethernet controller x710-tm4 firmware	lt	1.33.0.0
intel:ethernet_controller_x710-at2_firmware	intel ethernet controller x710-at2 firmware	lt	1.33.0.0
intel:ethernet_controller_xxv710-am2_firmware	intel ethernet controller xxv710-am2 firmware	lt	1.33.0.0
intel:ethernet_controller_xxv710-am1_firmware	intel ethernet controller xxv710-am1 firmware	lt	1.33.0.0
intel:ethernet_controller_x710-bm2_firmware	intel ethernet controller x710-bm2 firmware	lt	1.33.0.0
intel:ethernet_controller_710-bm1_firmware	intel ethernet controller 710-bm1 firmware	lt	1.33.0.0
intel:ethernet_700_series_software	intel ethernet 700 series software	lt	24.0

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00255.html

Social References

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

8 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

11.7%

JSON

Related for CVE-2019-0142

prion1 lenovo2 hp1 intel1 f51