CVE-2019-11147: intel converged_security_management_engine_firmware
Vulnerability summary
CVE-2019-11147 is a high (CVSS 7.8) vulnerability in intel converged_security_management_engine_firmware. EPSS estimates a 0.38% chance of exploitation in the next 30 days, higher than 30.1% of scored vulnerabilities.
Timeline
- 18-12-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Insufficient access control in hardware abstraction driver for MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0, 14.0.10; TXEInfo software for Intel(R) TXE before versions 3.1.70 and 4.0.20; INTEL-SA-00086 Detection Tool version 1.2.7.0 or before; INTEL-SA-00125 Detection Tool version 1.0.45.0 or before may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.38%
Chance of exploitation in the next 30 days
Percentile
30%
Versus all other CVEs
30-day change
0.00 pp
From 0.38% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Intel4 products
- converged_security_management_engine_firmware≥ 11.0, < 11.8.70 | ≥ 11.10, < 11.11.70 | ≥ 11.20, < 11.22.70 | ≥ 12.0, < 12.0.45 | ≥ 13.0, < 13.0.0 | ≥ 14.0.0, < 14.0.10
- intel-sa-00125_detection_tool≤ 1.0.45.0
- sa-00086_detection_tool≤ 1.2.7.0
- trusted_execution_engine_firmware≥ 3.0, < 3.1.70 | ≥ 4.0, < 4.0.20
1 vendor · 4 products
References
1 links- www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.htmlX Refsource MISCVendor Advisory