Sign-up

ID

VAR-201906-0915


CVE

CVE-2019-0128


TITLE

Intel Multiple vulnerabilities in the product

Trust: 0.8

sources: JVNDB: JVNDB-2019-004980

DESCRIPTION

Improper permissions in the installer for Intel(R) Chipset Device Software (INF Update Utility) before version 10.1.1.45 may allow an authenticated user to escalate privilege via local access. Intel Chipset Device Software is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Intel Chipset Device Software prior to version 10.1.1.45 are vulnerable

Trust: 1.26

sources: NVD: CVE-2019-0128 // BID: 108767 // VULHUB: VHN-140159

AFFECTED PRODUCTS

vendor:intelmodel:chipset device softwarescope:ltversion:10.1.1.45

Trust: 1.0

vendor:intelmodel:accelerated storage managerscope: - version: -

Trust: 0.8

vendor:intelmodel:chipset device softwarescope: - version: -

Trust: 0.8

vendor:intelmodel:compute cardscope: - version: -

Trust: 0.8

vendor:intelmodel:compute stickscope: - version: -

Trust: 0.8

vendor:intelmodel:core i3scope: - version: -

Trust: 0.8

vendor:intelmodel:core i5scope: - version: -

Trust: 0.8

vendor:intelmodel:core x-seriesscope: - version: -

Trust: 0.8

vendor:intelmodel:nuc kitscope: - version: -

Trust: 0.8

vendor:intelmodel:omni-path fabric manager guiscope: - version: -

Trust: 0.8

vendor:intelmodel:pentiumscope:eqversion:processor 2000 series

Trust: 0.8

vendor:intelmodel:pentiumscope:eqversion:processor 3000 series

Trust: 0.8

vendor:intelmodel:pentiumscope:eqversion:processor g series

Trust: 0.8

vendor:intelmodel:proset/wireless software driverscope: - version: -

Trust: 0.8

vendor:intelmodel:raid web console v3scope:eqversion:for windows

Trust: 0.8

vendor:intelmodel:sgx dcap linux driverscope: - version: -

Trust: 0.8

vendor:intelmodel:sgx linux client driverscope: - version: -

Trust: 0.8

vendor:intelmodel:turbo boost max technologyscope: - version: -

Trust: 0.8

vendor:intelmodel:xeonscope:eqversion:processor e7 v3 family

Trust: 0.8

vendor:intelmodel:xeonscope:eqversion:processor e7 v5 family

Trust: 0.8

vendor:intelmodel:xeonscope:eqversion:processor e7 v7 family

Trust: 0.8

vendor:intelmodel:ite tech* consumer infrared driverscope:eqversion:for windows 10

Trust: 0.8

vendor:intelmodel:open cloud integrity technologyscope: - version: -

Trust: 0.8

vendor:intelmodel:openattestationscope: - version: -

Trust: 0.8

vendor:intelmodel:chipset device softwarescope:eqversion:10.0.13

Trust: 0.3

vendor:intelmodel:chipset device softwarescope:eqversion:10.1.1.44

Trust: 0.3

vendor:intelmodel:chipset device softwarescope:eqversion:10.1.1.42

Trust: 0.3

vendor:intelmodel:chipset device softwarescope:eqversion:10.1.1.35

Trust: 0.3

vendor:intelmodel:chipset device softwarescope:eqversion:10.1.1.32

Trust: 0.3

vendor:intelmodel:chipset device softwarescope:neversion:10.1.1.45

Trust: 0.3

sources: BID: 108767 // JVNDB: JVNDB-2019-004980 // NVD: CVE-2019-0128

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2019-0128
value: HIGH

Trust: 1.0

CNNVD: CNNVD-201906-526
value: HIGH

Trust: 0.6

VULHUB: VHN-140159
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2019-0128
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

VULHUB: VHN-140159
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2019-0128
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 1.0

sources: VULHUB: VHN-140159 // CNNVD: CNNVD-201906-526 // NVD: CVE-2019-0128

PROBLEMTYPE DATA

problemtype:CWE-264

Trust: 1.1

sources: VULHUB: VHN-140159 // NVD: CVE-2019-0128

THREAT TYPE

local

Trust: 0.9

sources: BID: 108767 // CNNVD: CNNVD-201906-526

TYPE

permissions and access control issues

Trust: 0.6

sources: CNNVD: CNNVD-201906-526

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2019-004980

PATCH
title:[INTEL-SA-00248] Open Cloud Integrity Technology and OpenAttestation Advisoryurl:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00248.html
Trust: 0.8
title:[INTEL-SA-00257] Intel Omni-Path Fabric Manager GUI Advisoryurl:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00257.html
Trust: 0.8
title:[INTEL-SA-00259] Intel RAID Web Console 3 for Windows* Advisoryurl:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00259.html
Trust: 0.8
title:[INTEL-SA-00224] Intel Chipset Device Software (INF Update Utility) Advisoryurl:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00224.html
Trust: 0.8
title:[INTEL-SA-00264] Intel NUC Firmware Advisoryurl:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00264.html
Trust: 0.8
title:[INTEL-SA-00226] Intel Accelerated Storage Manager in Intel Rapid Storage Technology Enterprise Advisoryurl:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00226.html
Trust: 0.8
title:[INTEL-SA-00206] ITE Tech* Consumer Infrared Driver for Windows 10 Advisoryurl:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00206.html
Trust: 0.8
title:[INTEL-SA-00232] Intel PROSet/Wireless WiFi Software Advisoryurl:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00232.html
Trust: 0.8
title:[INTEL-SA-00235] Intel SGX for Linux Advisoryurl:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00235.html
Trust: 0.8
title:[INTEL-SA-00243] Intel Turbo Boost Max Technology 3.0 Advisoryurl:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00243.html
Trust: 0.8
title:[INTEL-SA-00247] Partial Physical Address Leakage Advisoryurl:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00247.html
Trust: 0.8
title:Intel Chipset Device Software Fixes for permissions and access control issues vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=93758
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2019-004980 // 
            
            
            
            CNNVD: CNNVD-201906-526

EXTERNAL IDS
db:NVDid:CVE-2019-0128
Trust: 2.8
db:BIDid:108767
Trust: 2.0
db:LENOVOid:LEN-27840
Trust: 1.7
db:JVNid:JVNVU95572531
Trust: 0.8
db:JVNDBid:JVNDB-2019-004980
Trust: 0.8
db:CNNVDid:CNNVD-201906-526
Trust: 0.7
db:VULHUBid:VHN-140159
Trust: 0.1
sources:
            
            
            VULHUB: VHN-140159 // 
            
            
            
            BID: 108767 // 
            
            
            
            JVNDB: JVNDB-2019-004980 // 
            
            
            
            CNNVD: CNNVD-201906-526 // 
            
            
            
            NVD: CVE-2019-0128

REFERENCES
url:http://www.securityfocus.com/bid/108767
Trust: 2.3
url:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00224.html
Trust: 2.0
url:https://support.lenovo.com/us/en/product_security/len-27840
Trust: 1.7
url:https://nvd.nist.gov/vuln/detail/cve-2019-0128
Trust: 1.4
url:http://www.intel.com/
Trust: 0.9
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-0130
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-0179
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-11123
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-0136
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-0180
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-11124
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-0157
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-0181
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-11125
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-0164
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-0182
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-11126
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-11127
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-0174
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-0183
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-11128
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-0175
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-11092
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-11129
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-3702
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-0177
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-11117
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-0128
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-0178
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-11119
Trust: 0.8
url:http://jvn.jp/cert/jvnvu95572531
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-0178
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-11119
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-0130
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-0179
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-11123
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-0136
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-0180
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-11124
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-0157
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-0181
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-11125
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-0164
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-0182
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-11126
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-0174
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-0183
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-11127
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-0175
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-11092
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-11128
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-3702
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-0177
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-11117
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-11129
Trust: 0.8
url:https://www.intel.com/content/www/us/en/security-center/advisory/in
Trust: 0.6
url:https://support.lenovo.com/us/zh/product_security/len-27840
Trust: 0.6
sources:
            
            
            VULHUB: VHN-140159 // 
            
            
            
            BID: 108767 // 
            
            
            
            JVNDB: JVNDB-2019-004980 // 
            
            
            
            CNNVD: CNNVD-201906-526 // 
            
            
            
            NVD: CVE-2019-0128

CREDITS
Marius Gabriel Mihai
Trust: 0.9
sources:
            
            
            BID: 108767 // 
            
            
            
            CNNVD: CNNVD-201906-526

SOURCES
db:VULHUBid:VHN-140159
db:BIDid:108767
db:JVNDBid:JVNDB-2019-004980
db:CNNVDid:CNNVD-201906-526
db:NVDid:CVE-2019-0128

LAST UPDATE DATE
2024-11-23T20:34:14.663000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-140159date:2023-03-03T00:00:00
db:BIDid:108767date:2019-06-11T00:00:00
db:JVNDBid:JVNDB-2019-004980date:2019-06-13T00:00:00
db:CNNVDid:CNNVD-201906-526date:2019-06-20T00:00:00
db:NVDid:CVE-2019-0128date:2024-11-21T04:16:17.667

SOURCES RELEASE DATE
db:VULHUBid:VHN-140159date:2019-06-13T00:00:00
db:BIDid:108767date:2019-06-11T00:00:00
db:JVNDBid:JVNDB-2019-004980date:2019-06-13T00:00:00
db:CNNVDid:CNNVD-201906-526date:2019-06-11T00:00:00
db:NVDid:CVE-2019-0128date:2019-06-13T16:29:00.357