Researcher Jesse Michael from Eclypsium was credited with reporting the issue. Impacted are 32-bit and 64-bit models of the diagnostic tool, before version 4.1.2.24. This vulnerability “may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access,” said Intel in its’ advisory. While details of the vulnerability are slim, Intel said that the flaw stems from improper access control in the tool.

The vulnerability in the Intel Processor Diagnostics tool (CVE-2019-11133) ranks 8.2 out of 10 on the CVSS 3.0 scale, making it high-severity.

“An attacker could exploit these vulnerabilities to gain an escalation of privileges on a previously infected machine.”

“Intel has released security updates to address vulnerabilities in Intel Solid State Drives for Data Centers and Intel Processor Diagnostic Tool,” according to a Cybersecurity and Infrastructure Security Agency ( CISA) alert. Intel on Tuesday released the patch in tandem with a fix for a medium-severity security vulnerability in its S4500/S4600 lineup of Solid State Drives (SSD) for data centers. The Intel Processor Diagnostic tool is a free product that allows users to test and diagnose any issues in their processor before having to contact tech support. Intel has patched a high-severity vulnerability in its processor diagnostic tool, which could allow local attackers to launch several malicious attacks on affected devices, such as escalation of privilege or denial of service.

Intel diagnostic utility