CVE-2019-0098

Logic bug vulnerability in subsystem for Intel(R) CSME before version 12.0.35, Intel(R) TXE before 3.1.65, 4.0.15 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Score

CVSS 3.0 6.8 Medium

Status

Modified - secure@intel.com

Published

2019-05-17

Last modified

2024-08-04

Affected products

• Converged Security Management Engine Firmware (Intel)
• Trusted Execution Engine Firmware (Intel)

References

• https://support.f5.com/csp/article/K10522033
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html