CVE-2019-11155

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable denial of service and information disclosure via local access.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-732

Affected software

Vendor	Product	Versions
n/a	Intel(R) PROSet/Wireless WiFi Software Security	See provided reference

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00288.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00288.htmlVendor Advisory

Timeline

Published: Nov 14, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-111567.8Logic errors in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable escalation CVE-2019-111576.7Improper conditions check in voltage settings for some Intel(R) Processors may allow a privileged user to potentially enable escalation of p CVE-2019-11166.5An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows CVE-2019-111627.8Insufficient access control in hardware abstraction in SEMA driver for Intel(R) Computing Improvement Program before version 2.4.0.04733 may CVE-2019-111637.8Insufficient access control in a hardware abstraction driver for Intel(R) Processor Identification Utility for Windows before version 6.1.07 CVE-2019-111655.5Improper conditions check in the Linux kernel driver for the Intel(R) FPGA SDK for OpenCL(TM) Pro Edition before version 19.4 may allow an a CVE-2019-111666.7Improper file permissions in the installer for Intel(R) Easy Streaming Wizard before version 2.1.0731 may allow an authenticated user to pot CVE-2019-111677.8Improper file permission in software installer for Intel(R) Smart Connect Technology for Intel(R) NUC may allow an authenticated user to pot CVE-2019-111689.1Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable CVE-2019-11178.8A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V CVE-2019-111707.8Authentication bypass in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable informati CVE-2019-111719.8Heap corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information dis