CVE-2019-0098

EUVD-2019-0905
Logic bug vulnerability in subsystem for Intel(R) CSME before version 12.0.35, Intel(R) TXE before 3.1.65, 4.0.15 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 MEDIUM
PHYSICAL
LOW
NONE
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 17%
Affected Products (NVD)
VendorProductVersion
intelconverged_security_management_engine_firmware
11.0 ≤
𝑥
< 11.8.65
intelconverged_security_management_engine_firmware
11.10 ≤
𝑥
< 11.11.65
intelconverged_security_management_engine_firmware
11.20 ≤
𝑥
< 11.22.65
intelconverged_security_management_engine_firmware
12.0 ≤
𝑥
< 12.0.35
inteltrusted_execution_engine_firmware
3.0 ≤
𝑥
< 3.1.65
inteltrusted_execution_engine_firmware
4.0 ≤
𝑥
< 4.0.15
𝑥
= Vulnerable software versions