CVE-2019-0169: High severity intel converged security and management engine vulnerability
Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an unauthenticated user to potentially enable escalation of privileges, information disclosure or denial of service via adjacent access.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-0169?
CVE-2019-0169 is a vulnerability in the subsystem of Intel(R) CSME and Intel(R) TXE that may allow an unauthenticated user to enable escalation of privileges, information disclosure, or denial of service via adjacent access.
How severe is CVE-2019-0169?
CVE-2019-0169 has a severity score of 8.8, which is considered high.
Which software versions are affected by CVE-2019-0169?
Intel Converged Security Management Engine Firmware versions 11.0 to 11.8.70, 11.10 to 11.11.70, 11.20 to 11.22.70, and 12.0 to 12.0.45, as well as Intel Trusted Execution Engine Firmware versions 3.0 to 3.1.70 and 4.0 to 4.0.20 are affected by CVE-2019-0169.
How can an unauthenticated user exploit CVE-2019-0169?
An unauthenticated user can potentially exploit CVE-2019-0169 through adjacent access to enable escalation of privileges, information disclosure, or denial of service.
Where can I find more information about CVE-2019-0169?
More information about CVE-2019-0169 can be found in the following references: [Siemens ProductCERT](https://cert-portal.siemens.com/productcert/pdf/ssa-398519.pdf) and [Intel Security Center Advisory Intel-SA-00241](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html).