← Back to CVE List

CVE-2019-12532

Published: 2019-08-26T18:15Z
Last Modified: 2024-11-21T04:23Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Improper access control in the Insyde software tools may allow an authenticated user to potentially enable escalation of privilege, or information disclosure via local access. This is a software vulnerability, not a firmware issue. Affected tools include: H2OFFT version 3.02~5.28, 100.00.00.00~100.00.08.23 and 200.00.00.01~200.00.00.05, H2OOAE before version 200.00.00.02, H2OSDE before version 200.00.00.07, H2OUVE before version 200.00.02.02, H2OPCM before version 100.00.06.00, H2OELV before version 100.00.02.08. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt