8.2
CVE-2019-0142
- EPSS 0.12%
- Veröffentlicht 14.11.2019 19:15:11
- Zuletzt bearbeitet 21.11.2024 04:16:19
- Quelle secure@intel.com
- Teams Watchlist Login
- Unerledigt Login
Insufficient access control in ilp60x64.sys driver for Intel(R) Ethernet 700 Series Controllers before version 1.33.0.0 may allow a privileged user to potentially enable escalation of privilege via local access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Ethernet Controller X710-tm4 Firmware Version < 1.33.0.0
Intel ≫ Ethernet Controller X710-at2 Firmware Version < 1.33.0.0
Intel ≫ Ethernet Controller Xxv710-am2 Firmware Version < 1.33.0.0
Intel ≫ Ethernet Controller Xxv710-am1 Firmware Version < 1.33.0.0
Intel ≫ Ethernet Controller X710-bm2 Firmware Version < 1.33.0.0
Intel ≫ Ethernet Controller 710-bm1 Firmware Version < 1.33.0.0
Intel ≫ Ethernet 700 Series Software Version < 24.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.12% | 0.271 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.2 | 1.5 | 6 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|