CVE-2019-11103

—

CVSS 3.1

7.8 high

EPSS

<1%p29

Published

Dec 18, 2019 (Dec 18, 2019)

Modified

Jun 17, 2026

Description

Insufficient input validation in firmware update software for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow an authenticated user to potentially enable escalation of privilege via local access.

Vendors: intel
Products: converged security management engine firmware
Weakness: CWE-20
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.