CVE-2019-0090

🗓️ 17 May 2019 15:41:38Reported by intelType

Insufficient access control in Intel CSME, TXE, and SPS may enable privilege escalation

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2019-0090	6 Mar 202011:35	–	circl
CNVD	Access Control Error Vulnerability in Multiple Intel Products	22 May 201900:00	–	cnvd
Cvelist	CVE-2019-0090	17 May 201915:41	–	cvelist
EUVD	EUVD-2019-0897	7 Oct 202500:30	–	euvd
F5 Networks	K42117350: Intel-SA-00213: Intel CSME, Intel SPS, Intel TXE, Intel DAL, and Intel AMT vulnerabilities	21 Feb 202318:55	–	f5
F5 Networks	K59145983: Intel CSME and SPS vulnerability CVE-2019-0090	21 Feb 202319:58	–	f5
Hewlett-Packard	HPSBHF03616 rev. 4 - Intel 2019.1 CSME, Trusted Execution Engine (TXE), Active Management Technology (AMT) Security Updates	13 May 201900:00	–	hp
Intel	Intel® CSME, Intel® SPS, Intel® TXE, Intel® DAL, and Intel® AMT 2019.1 QSR Advisory	14 Apr 202000:00	–	intel
Lenovo	Intel CSME, Server Platform Services, Trusted Execution Engine and Intel Active Management Technology Vulnerabilities - Lenovo Support US	14 May 201912:22	–	lenovo
Lenovo	Intel CSME, Server Platform Services, Trusted Execution Engine and Intel Active Management Technology Vulnerabilities - Lenovo Support US	14 May 201912:22	–	lenovo

NVD

Node

intel converged_security_and_management_engineRange<12.0.35

Node

intel server_platform_servicesRange<sps_e3_05.00.04.027.0

[
  {
    "product": "Intel(R) Converged Security & Management Engine (CSME), Intel(R) Server Platform Services (SPS)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "CSME before version 12.0.35, Intel(R) SPS before version SPS_E3_05.00.04.027.0"
      }
    ]
  }
]

Source	Link
support	www.support.f5.com/csp/article/K59145983
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html

21 Nov 2024 04:16Current

7.3High risk

Vulners AI Score7.3

CVSS 24.4

CVSS 3.17.1

EPSS0.00384