CVE-2019-11088

🗓️ 18 Dec 2019 21:08:03Reported by intelType

Insufficient input validation in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow unauthenticated user escalation of privilege via adjacent acces

Reporter	Title	Published	Views	Family All 16
BDU FSTEC	The vulnerability of Intel Active Management Technology’s microprogramming software arises from insufficient testing of input data, allowing attackers to exploit this weakness to gain increased privileges.	13 Dec 201900:00	–	bdu_fstec
Circl	CVE-2019-11088	15 Mar 202413:11	–	circl
CNVD	Intel Active Management Technology Elevation of Privilege Vulnerability (CNVD-2019-42598)	14 Nov 201900:00	–	cnvd
CVE	CVE-2019-11088	18 Dec 201921:08	–	cve
EUVD	EUVD-2019-2792	7 Oct 202500:30	–	euvd
Hewlett-Packard	HPSBHF03637 rev. 3 - Intel 2019.2 IPU CSME SPS TXE AMT Security Updates	9 Nov 201900:00	–	hp
Intel	2019.2 IPU – Intel® CSME, Intel® SPS, Intel® TXE, Intel® AMT, Intel® PTT and Intel® DAL Advisory	9 Jan 201900:00	–	intel
Tenable Nessus	Juniper Junos NFX150 Multiple Vulnerabilities (JSA11026)	28 Jul 202000:00	–	nessus
Lenovo	Intel CSME, Server Platform Services, Trusted Execution Engine, Intel Active Management Technology and Dynamic Application Loader Vulnerabilities - Lenovo Support US	4 Nov 201916:25	–	lenovo
NVD	CVE-2019-11088	18 Dec 201922:15	–	nvd

[
  {
    "product": "Intel(R) AMT",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "See provided reference"
      }
    ]
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html

18 Dec 2019 21:08Current

9.4High risk

Vulners AI Score9.4

EPSS0.00224