CVE-2019-11102

Insufficient input validation in Intel(R) DAL software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access.

Link	Resource
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html	Vendor Advisory

Configuration 1

cpe:2.3:o:intel:trusted_execution_engine_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:intel:trusted_execution_engine_firmware:*:*:*:*:*:*:*:* cpe:2.3:a:intel:dynamic_application_loader:*:*:*:*:*:converged_security_management_engine_firmware:*:* cpe:2.3:a:intel:dynamic_application_loader:*:*:*:*:*:converged_security_management_engine_firmware:*:* cpe:2.3:a:intel:dynamic_application_loader:*:*:*:*:*:converged_security_management_engine_firmware:*:* cpe:2.3:a:intel:dynamic_application_loader:*:*:*:*:*:converged_security_management_engine_firmware:*:* cpe:2.3:a:intel:dynamic_application_loader:*:*:*:*:*:converged_security_management_engine_firmware:*:* cpe:2.3:a:intel:dynamic_application_loader:*:*:*:*:*:converged_security_management_engine_firmware:*:*

---

Published : 2019-12-18 10:15

Updated : 2020-01-02 07:09

---

NVD link : CVE-2019-11102

Mitre link : CVE-2019-11102

No products.

CWE-20