CVE-2019-11154

Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable denial of service and information disclosure via local access.

CVSS v3 7.1 HIGH
CVSS v2.0 3.6 LOW

7.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

3.6^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:P

Exploitability : 3.9 / Impact : 4.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00288.html	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:intel:proset\/wireless_wifi:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:intel:dual_band_wireless-ac_3165:-:::::::*
	cpe:2.3:h:intel:dual_band_wireless-ac_3168:-:::::::*
	cpe:2.3:h:intel:dual_band_wireless-ac_7265_\(rev_d\):-:::::::*
	cpe:2.3:h:intel:dual_band_wireless-ac_8260:-:::::::*
	cpe:2.3:h:intel:dual_band_wireless-ac_8265:-:::::::*
	cpe:2.3:h:intel:dual_band_wireless-n_7265_\(rev_d\):-:::::::*
	cpe:2.3:h:intel:wi-fi_6_ax200:-:::::::*
	cpe:2.3:h:intel:wi-fi_6_ax201:-:::::::*
	cpe:2.3:h:intel:wireless-ac_9260:-:::::::*
	cpe:2.3:h:intel:wireless-ac_9461:-:::::::*
	cpe:2.3:h:intel:wireless-ac_9462:-:::::::*
	cpe:2.3:h:intel:wireless-ac_9560:-:::::::*
	cpe:2.3:h:intel:wireless_7265_\(rev_d\):-:::::::*

History

No history.

Information

Published : 2019-11-14 17:15

Updated : 2024-02-28 17:28

NVD link : CVE-2019-11154

Mitre link : CVE-2019-11154

CVE.ORG link : CVE-2019-11154

JSON object : View

Products Affected

intel

wireless-ac_9462
wi-fi_6_ax200
wireless-ac_9260
proset\/wireless_wifi
wireless-ac_9461
dual_band_wireless-n_7265_\(rev_d\)
wireless-ac_9560
dual_band_wireless-ac_3165
wireless_7265_\(rev_d\)
dual_band_wireless-ac_8265
dual_band_wireless-ac_3168
dual_band_wireless-ac_7265_\(rev_d\)
dual_band_wireless-ac_8260
wi-fi_6_ax201

CWE

CWE-732

Incorrect Permission Assignment for Critical Resource

{"id": "CVE-2019-11154", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 1.8}]}, "published": "2019-11-14T17:15:13.520", "references": [{"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00288.html", "tags": ["Vendor Advisory"], "source": "secure@intel.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-732"}]}], "descriptions": [{"lang": "en", "value": "Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable denial of service and information disclosure via local access."}, {"lang": "es", "value": "Los permisos de directorio inapropiados en Intel\u00ae PROSet/Wireless WiFi Software versiones anteriores a la versi\u00f3n 21.40, puede habilitar a un usuario autenticado para permitir potencialmente una denegaci\u00f3n de servicio y una divulgaci\u00f3n de informaci\u00f3n por medio de un acceso local."}], "lastModified": "2021-07-21T11:39:23.747", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:intel:proset\\/wireless_wifi:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "898671D5-38BA-4822-8C9B-68E871BFC0BE", "versionEndExcluding": "21.40"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:dual_band_wireless-ac_3165:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0C1729F4-7CCA-404A-903E-F0F6C1F9302B"}, {"criteria": "cpe:2.3:h:intel:dual_band_wireless-ac_3168:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3E3F3AC3-7774-44DE-82C3-531D874D6175"}, {"criteria": "cpe:2.3:h:intel:dual_band_wireless-ac_7265_\\(rev_d\\):-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3D6C6BA3-F26D-4416-AAF5-96DD69BF12A5"}, {"criteria": "cpe:2.3:h:intel:dual_band_wireless-ac_8260:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FD5900B9-D8E3-4928-B587-955BCAE07460"}, {"criteria": "cpe:2.3:h:intel:dual_band_wireless-ac_8265:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "89ED6FDA-BE47-4E7D-A449-439A917119DA"}, {"criteria": "cpe:2.3:h:intel:dual_band_wireless-n_7265_\\(rev_d\\):-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F0D294F2-69D6-4A3E-A190-BE39399C5B86"}, {"criteria": "cpe:2.3:h:intel:wi-fi_6_ax200:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9D653F9C-5B2E-400F-8F50-BFE466F08F0E"}, {"criteria": "cpe:2.3:h:intel:wi-fi_6_ax201:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A0433774-9479-4A01-B697-1379AEA223C9"}, {"criteria": "cpe:2.3:h:intel:wireless-ac_9260:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4900842A-56C4-4F09-BBD4-080EC7CEBF33"}, {"criteria": "cpe:2.3:h:intel:wireless-ac_9461:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2F198C1B-28A8-4FB8-9266-333A6E465445"}, {"criteria": "cpe:2.3:h:intel:wireless-ac_9462:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1B60A55C-0969-43D4-A1A8-0E736DE89AFA"}, {"criteria": "cpe:2.3:h:intel:wireless-ac_9560:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C7A5DD09-188E-4772-BBFD-3DCC776F4D55"}, {"criteria": "cpe:2.3:h:intel:wireless_7265_\\(rev_d\\):-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BD700D79-A4B3-4C62-93BE-D13F016AA3CC"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "secure@intel.com"}