CVE-2019-0153: Buffer Overflow
Published May 17, 2019
·Updated
Buffer overflow in subsystem in Intel(R) CSME 12.0.0 through 12.0.34 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
Affected Software
1 affected component
Intel Converged Security Management Engine Firmware<12.0.35
Event History
May 17, 2019
CVE Published
via MITRE·03:41 PM
Data Sourced
via MITRE·03:41 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2019-0153?
CVE-2019-0153 is a vulnerability in the Intel Converged Security Management Engine Firmware that allows an unauthenticated user to potentially enable escalation of privilege through network access.
2
How severe is CVE-2019-0153?
CVE-2019-0153 has a severity rating of critical, with a CVSS score of 9.8.
3
How does CVE-2019-0153 affect Intel Converged Security Management Engine Firmware?
CVE-2019-0153 affects Intel CSME firmware versions 12.0.0 through 12.0.34, with 12.0.35 being the fixed version.
4
What is the Common Weakness Enumeration (CWE) associated with CVE-2019-0153?
The CWE associated with CVE-2019-0153 is CWE-119, which is a flaw that allows buffer overflow.
5
How can I mitigate CVE-2019-0153?
To mitigate CVE-2019-0153, users should update to Intel CSME firmware version 12.0.35 or later.