CVE-2019-0169
First published: Wed Dec 18 2019(Updated: )
Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an unauthenticated user to potentially enable escalation of privileges, information disclosure or denial of service via adjacent access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel Converged Security Management Engine Firmware | >=11.0<11.8.70 | |
| Intel Converged Security Management Engine Firmware | >=11.10<11.11.70 | |
| Intel Converged Security Management Engine Firmware | >=11.20<11.22.70 | |
| Intel Converged Security Management Engine Firmware | >=12.0<12.0.45 | |
| Intel Trusted Execution Engine Firmware | >=3.0<3.1.70 | |
| Intel Trusted Execution Engine Firmware | >=4.0<4.0.20 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-0169?
CVE-2019-0169 is a vulnerability in the subsystem of Intel(R) CSME and Intel(R) TXE that may allow an unauthenticated user to enable escalation of privileges, information disclosure, or denial of service via adjacent access.
How severe is CVE-2019-0169?
CVE-2019-0169 has a severity score of 8.8, which is considered high.
Which software versions are affected by CVE-2019-0169?
Intel Converged Security Management Engine Firmware versions 11.0 to 11.8.70, 11.10 to 11.11.70, 11.20 to 11.22.70, and 12.0 to 12.0.45, as well as Intel Trusted Execution Engine Firmware versions 3.0 to 3.1.70 and 4.0 to 4.0.20 are affected by CVE-2019-0169.
How can an unauthenticated user exploit CVE-2019-0169?
An unauthenticated user can potentially exploit CVE-2019-0169 through adjacent access to enable escalation of privileges, information disclosure, or denial of service.
Where can I find more information about CVE-2019-0169?
More information about CVE-2019-0169 can be found in the following references: [Siemens ProductCERT](https://cert-portal.siemens.com/productcert/pdf/ssa-398519.pdf) and [Intel Security Center Advisory Intel-SA-00241](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html).
- collector/nvd-index
- vendor/intel
- canonical/intel converged security management engine firmware
- version/intel converged security management engine firmware/11.0
- version/intel converged security management engine firmware/11.10
- version/intel converged security management engine firmware/11.20
- version/intel converged security management engine firmware/12.0
- canonical/intel trusted execution engine firmware
- version/intel trusted execution engine firmware/3.0
- version/intel trusted execution engine firmware/4.0