CVE-2019-0093: Medium severity intel converged security and manageability engine vulnerability
Insufficient data sanitization vulnerability in HECI subsystem for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) SPS before version SPSE305.00.04.027.0 may allow a privileged user to potentially enable information disclosure via local access.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-0093?
CVE-2019-0093 is an insufficient data sanitization vulnerability in the HECI subsystem for Intel(R) CSME and Intel(R) SPS.
What is the severity of CVE-2019-0093?
The severity of CVE-2019-0093 is medium with a CVSS score of 4.4.
How does CVE-2019-0093 enable information disclosure?
CVE-2019-0093 allows a privileged user to potentially enable information disclosure via local access.
Which versions of Intel Converged Security and Management Engine (CSME) are affected by CVE-2019-0093?
Versions 11.8.0 to 11.8.65, 11.11.0 to 11.11.65, 11.22.0 to 11.22.65, and 12.0 to 12.0.35 of Intel Converged Security and Management Engine (CSME) are affected by CVE-2019-0093.
Where can I find more information about CVE-2019-0093?
You can find more information about CVE-2019-0093 on the Intel Security Center advisory at the following link: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html