VULNERABILITY INTELLIGENCE
CVE-2019-11088
CVSS score8.8 HIGH
EPSS probability0.61%
CISA KEVNot currently listed
Published2019-12-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- secure@intel.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory