CVE-2019-11155

Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable denial of service and information disclosure via local access.

CVSS v3 7.1 HIGH
CVSS v2.0 3.6 LOW

7.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

3.6^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:P

Exploitability : 3.9 / Impact : 4.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00288.html	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:intel:proset\/wireless_wifi:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:intel:dual_band_wireless-ac_3165:-:::::::*
	cpe:2.3:h:intel:dual_band_wireless-ac_3168:-:::::::*
	cpe:2.3:h:intel:dual_band_wireless-ac_7265_\(rev_d\):-:::::::*
	cpe:2.3:h:intel:dual_band_wireless-ac_8260:-:::::::*
	cpe:2.3:h:intel:dual_band_wireless-ac_8265:-:::::::*
	cpe:2.3:h:intel:dual_band_wireless-n_7265_\(rev_d\):-:::::::*
	cpe:2.3:h:intel:wi-fi_6_ax200:-:::::::*
	cpe:2.3:h:intel:wi-fi_6_ax201:-:::::::*
	cpe:2.3:h:intel:wireless-ac_9260:-:::::::*
	cpe:2.3:h:intel:wireless-ac_9461:-:::::::*
	cpe:2.3:h:intel:wireless-ac_9462:-:::::::*
	cpe:2.3:h:intel:wireless-ac_9560:-:::::::*
	cpe:2.3:h:intel:wireless_7265_\(rev_d\):-:::::::*

History

No history.

Information

Published : 2019-11-14 17:15

Updated : 2023-12-10 13:13

NVD link : CVE-2019-11155

Mitre link : CVE-2019-11155

CVE.ORG link : CVE-2019-11155

JSON object : View

Products Affected

intel

dual_band_wireless-ac_3168
proset\/wireless_wifi
dual_band_wireless-ac_8260
dual_band_wireless-ac_8265
wi-fi_6_ax200
wi-fi_6_ax201
dual_band_wireless-ac_7265_\(rev_d\)
wireless-ac_9462
dual_band_wireless-ac_3165
dual_band_wireless-n_7265_\(rev_d\)
wireless_7265_\(rev_d\)
wireless-ac_9461
wireless-ac_9560
wireless-ac_9260

CWE

CWE-732

Incorrect Permission Assignment for Critical Resource

{"id": "CVE-2019-11155", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 1.8}]}, "published": "2019-11-14T17:15:13.567", "references": [{"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00288.html", "tags": ["Vendor Advisory"], "source": "secure@intel.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-732"}]}], "descriptions": [{"lang": "en", "value": "Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable denial of service and information disclosure via local access."}, {"lang": "es", "value": "Los permisos de directorio inapropiados en Intel\u00ae PROSet/Wireless WiFi Software versiones anteriores a la versi\u00f3n 21.40, puede habilitar a un usuario autenticado para permitir potencialmente una denegaci\u00f3n de servicio y una divulgaci\u00f3n de informaci\u00f3n por medio de un acceso local."}], "lastModified": "2021-07-21T11:39:23.747", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:intel:proset\\/wireless_wifi:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "898671D5-38BA-4822-8C9B-68E871BFC0BE", "versionEndExcluding": "21.40"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intel:dual_band_wireless-ac_3165:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0C1729F4-7CCA-404A-903E-F0F6C1F9302B"}, {"criteria": "cpe:2.3:h:intel:dual_band_wireless-ac_3168:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3E3F3AC3-7774-44DE-82C3-531D874D6175"}, {"criteria": "cpe:2.3:h:intel:dual_band_wireless-ac_7265_\\(rev_d\\):-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3D6C6BA3-F26D-4416-AAF5-96DD69BF12A5"}, {"criteria": "cpe:2.3:h:intel:dual_band_wireless-ac_8260:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FD5900B9-D8E3-4928-B587-955BCAE07460"}, {"criteria": "cpe:2.3:h:intel:dual_band_wireless-ac_8265:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "89ED6FDA-BE47-4E7D-A449-439A917119DA"}, {"criteria": "cpe:2.3:h:intel:dual_band_wireless-n_7265_\\(rev_d\\):-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F0D294F2-69D6-4A3E-A190-BE39399C5B86"}, {"criteria": "cpe:2.3:h:intel:wi-fi_6_ax200:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9D653F9C-5B2E-400F-8F50-BFE466F08F0E"}, {"criteria": "cpe:2.3:h:intel:wi-fi_6_ax201:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A0433774-9479-4A01-B697-1379AEA223C9"}, {"criteria": "cpe:2.3:h:intel:wireless-ac_9260:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4900842A-56C4-4F09-BBD4-080EC7CEBF33"}, {"criteria": "cpe:2.3:h:intel:wireless-ac_9461:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2F198C1B-28A8-4FB8-9266-333A6E465445"}, {"criteria": "cpe:2.3:h:intel:wireless-ac_9462:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1B60A55C-0969-43D4-A1A8-0E736DE89AFA"}, {"criteria": "cpe:2.3:h:intel:wireless-ac_9560:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C7A5DD09-188E-4772-BBFD-3DCC776F4D55"}, {"criteria": "cpe:2.3:h:intel:wireless_7265_\\(rev_d\\):-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BD700D79-A4B3-4C62-93BE-D13F016AA3CC"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "secure@intel.com"}