CVE-2019-11119

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Insufficient session validation in the service API for Intel(R) RWC3 version 4.186 and before may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	Intel(R) RAID Web Console 3 for Windows*	Version before 7.009.011.000

References

http://www.securityfocus.com/bid/108780Broken Link, Third Party Advisory, VDB Entry
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00259.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/108780Broken Link, Third Party Advisory, VDB Entry
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00259.htmlPatch, Vendor Advisory

Timeline

Published: Jun 13, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-11125.5An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel In CVE-2019-111207.8Insufficient path checking in the installer for Intel(R) Active System Console before version 8.0 Build 24 may allow an authenticated user t CVE-2019-111217.8Improper file permissions in the installer for the Intel(R) Media SDK for Windows before version 2019 R1 may allow an authenticated user to CVE-2019-111236.7Insufficient session validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of priv CVE-2019-111246.7Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, d CVE-2019-111256.7Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privil CVE-2019-111266.7Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial CVE-2019-111276.7Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of CVE-2019-111286.7Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privil CVE-2019-111296.7Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, d CVE-2019-11138.8A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s CVE-2019-111319.8Logic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potent