CVE-2019-11157 Privilege escalation in Intel(R) Processors
A privileged local attacker can exploit improper voltage condition checks in Intel processors to escalate privileges or disclose information.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-11157?
CVE-2019-11157 is a medium-severity vulnerability in Intel(R) Processors, published on 16 Dec 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Improper conditions check in voltage settings for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege and/or information disclosure via local access.
Which versions are affected by CVE-2019-11157?
It affects 264 products.
Products include Intel Core I3-1000g1 Firmware, Intel Core I3-1000g4 Firmware, Intel Core I3-1005g1 Firmware, Intel Core I3-10110u Firmware, Intel Core I3-10110y Firmware, Intel Core I3-6006u Firmware and 258 more.
How do I fix CVE-2019-11157?
Apply the vendor's patch.
Is CVE-2019-11157 being exploited?
There is no known exploitation of CVE-2019-11157 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Intel(R) Processors
Sources
Also known as GHSA-r3vh-cpmh-5vhc, UBUNTU-CVE-2019-11157.