CVE-2019-11086

Insufficient input validation in subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Score

CVSS 3.1 6.8 Medium

Status

Modified - secure@intel.com

Published

2019-12-18

Last modified

2024-08-04

Weaknesses

CWE-20

Affected products

• Active Management Technology Firmware (Intel)

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html