CVE-2019-11167

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper file permission in software installer for Intel(R) Smart Connect Technology for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published
Oct 11, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-111689.1Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enableCVE-2019-11178.8A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution VCVE-2019-111707.8Authentication bypass in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable informatiCVE-2019-111719.8Heap corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disCVE-2019-111725.3Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information dCVE-2019-111737.1Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enableCVE-2019-111745.3Insufficient access control in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable infCVE-2019-111757.5Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable dCVE-2019-111777.5Unhandled exception in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of sCVE-2019-111788.1Stack overflow in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information discloCVE-2019-111796.5Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable infCVE-2019-11188.8A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V
CVE-2019-11167: High severity, CVSS 7.8 | Vulnix