First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2019-11140

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

Metrics

CVSS 3.0 6.7/10CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	Intel(R) NUC Advisory	See provided reference

References

Timeline

Published: Aug 19, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-111436.7Improper permissions in the software installer for Intel(R) Authenticate before 3.8 may allow an authenticated user to potentially enable es CVE-2019-111457.8Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escal CVE-2019-111467.8Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escal CVE-2019-111477.8Insufficient access control in hardware abstraction driver for MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70 CVE-2019-111487.8Improper permissions in the installer for Intel(R) Remote Displays SDK before version 2.0.1 R2 may allow an authenticated user to potentiall CVE-2019-111517.8Memory corruption issues in Intel(R) WIFI Drivers before version 21.40 may allow a privileged user to potentially enable escalation of privi CVE-2019-111528.8Memory corruption issues in Intel(R) WIFI Drivers before version 21.40 may allow a privileged user to potentially enable escalation of privi CVE-2019-111537.8Memory corruption issues in Intel(R) PROSet/Wireless WiFi Software extension DLL before version 21.40 may allow an authenticated user to pot CVE-2019-111547.1Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially CVE-2019-111557.1Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially CVE-2019-111567.8Logic errors in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable escalation CVE-2019-111576.7Improper conditions check in voltage settings for some Intel(R) Processors may allow a privileged user to potentially enable escalation of p

CVE-2019-11140: Medium severity, CVSS 6.7 | Vulnix