← Voltar para CVEs

CVE-2019-0090

HIGH

7.1

Descricao

Insufficient access control vulnerability in subsystem for Intel(R) CSME before versions 11.x, 12.0.35 Intel(R) TXE 3.x, 4.x, Intel(R) Server Platform Services 3.x, 4.x, Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Detalhes CVE

Pontuacao CVSS v3.17.1

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Vetor de ataquePHYSICAL

ComplexidadeHIGH

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado5/17/2019

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

intel:converged_security_and_management_engineintel:server_platform_services

Referencias

https://support.f5.com/csp/article/K59145983(secure@intel.com)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html(secure@intel.com)

https://support.f5.com/csp/article/K59145983(af854a3a-2127-422b-91ae-364da2661108)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.