CVE-2019-0128: 
Intel Chipset Device Software vulnerability analysis and mitigation

A security vulnerability identified as CVE-2019-0128 was discovered in Intel(R) Chipset Device Software (INF Update Utility) versions prior to 10.1.1.45. The vulnerability was disclosed on June 13, 2019, and involves improper permissions in the installer that could potentially lead to privilege escalation (Intel Advisory).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the following vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The weakness is categorized under CWE-264 (Permissions, Privileges, and Access Controls), indicating issues with access control mechanisms (NVD).

If exploited, this vulnerability could allow an authenticated user with local access to escalate their privileges on the affected system, potentially gaining elevated access to system resources and sensitive information (NVD).

The vulnerability requires local access and an authenticated user to exploit. The attack complexity is considered low, requiring minimal specialized access conditions or extenuating circumstances for exploitation (NVD).

Intel has released version 10.1.1.45 of the Chipset Device Software (INF Update Utility) to address this vulnerability. Users are advised to update to this version or later to mitigate the security risk (Intel Advisory).