Vulnerability in Intel Server_platform_services

CVE-2019-0089

Improper data sanitization vulnerability in subsystem in Intel(R) SPS before versions SPS_E5_04.00.04.381.0, SPS_E3_04.01.04.054.0, SPS_SoC-A_04.00.04.181.0, and SPS_SoC-X_04.00.04.086.0 may allow a privileged user to potentially enable es…

EPSS: 0.004 (29.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

  • Intel Server_platform_services
  • N/a Intel(r) Server Platform Services (Sps) — versions Versions before SPS_E5_04.00.04.381.0, SPS_E3_04.01.04.054.0, SPS_SoC-A_04.00.04.181.0, and SPS_SoC-X_04.00.04.086.0.

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2019-0089?
CVE-2019-0089 is a medium-severity vulnerability in Intel Server_platform_services, classified under CWE-19. CVSS score: 6.7/10. Published 2019-05-17.
How severe is CVE-2019-0089?
Medium severity. CVSS v3 base score is 6.7 out of 10.