CVE-2019-11146

Vulnerability

Intel® Driver & Support Assistant (DSA) before version 19.7.30.2 contains an improper file verification vulnerability [1]. An authenticated user can exploit this via local access to potentially enable escalation of privilege. The flaw lies in how DSA handles file verification, possibly allowing manipulation of files that should be restricted.

Exploitation

An attacker must have local authenticated access to the system [1]. The exploitation sequence involves manipulating file verification processes within DSA to bypass intended restrictions, leading to privilege escalation. No network access or user interaction beyond local authentication is required.

Impact

Successful exploitation grants the attacker elevated privileges [1]. This can result in unauthorized actions such as file modification, system control, or access to sensitive data, all within the local scope.

Mitigation

Intel released DSA version 19.7.30.2 to fix this issue [1]. Users should update to this version or later. No workarounds are disclosed; updating is the sole recommended mitigation.