CVE-2019-0169

Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an unauthenticated user to potentially enable escalation of privileges, information disclosure or denial of service via adjacent access.

Score

CVSS 3.1 8.8 High

Status

Modified - secure@intel.com

Published

2019-12-18

Last modified

2024-08-04

Weaknesses

CWE-787

Affected products

• Converged Security Management Engine Firmware (Intel)
• Trusted Execution Engine Firmware (Intel)

References

• https://cert-portal.siemens.com/productcert/pdf/ssa-398519.pdf
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html