Vulnerability in Intel Converged_security_management_engine_firmware
CVE-2019-0086
Insufficient access control vulnerability in Dynamic Application Loader software for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable es…
EPSS: 0.004 (27.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Intel Converged_security_management_engine_firmware
- Intel Trusted_execution_engine_firmware
- N/a Intel(r) Converged Security & Management Engine (Csme) Dynamic Application Loader, Intel (R) Trusted Execution Interface (Txe) — versions Versions before CSME 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15.
Weakness classification (CWE)
References
- secure@intel.com (x_refsource_MISC, Vendor Advisory)
- secure@intel.com (x_refsource_CONFIRM)
- secure@intel.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-0086?
- CVE-2019-0086 is a high-severity vulnerability in Intel Converged_security_management_engine_firmware, classified under Improper Link Resolution Before File Access. CVSS score: 7.8/10. Published 2019-05-17.
- How severe is CVE-2019-0086?
- High severity. CVSS v3 base score is 7.8 out of 10.