CVE-2019-11131

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Logic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Dec 18, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-111328.4Cross site scripting in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a privileged user to pot CVE-2019-111337.8Improper access control in the Intel(R) Processor Diagnostic Tool before version 4.1.2.24 may allow an authenticated user to potentially ena CVE-2019-111356.5TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable informat CVE-2019-111366.7Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors CVE-2019-111378.2Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xe CVE-2019-111396.0Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to p CVE-2019-111406.7Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privileg CVE-2019-111436.7Improper permissions in the software installer for Intel(R) Authenticate before 3.8 may allow an authenticated user to potentially enable es CVE-2019-111457.8Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escal CVE-2019-111467.8Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escal CVE-2019-111477.8Insufficient access control in hardware abstraction driver for MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70 CVE-2019-111487.8Improper permissions in the installer for Intel(R) Remote Displays SDK before version 2.0.1 R2 may allow an authenticated user to potentiall