Lucene search

[email protected]CVE-2019-0152

HistoryNov 14, 2019 - 8:15 p.m.

CVE-2019-0152

2019-11-1420:15:11

CWE-119

[email protected]

web.nvd.nist.gov

cve-2019-0152

insufficient memory protection

system management mode

intel xeon processors

privileged user

escalation of privilege

local access

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Insufficient memory protection in System Management Mode (SMM) and Intel® TXT for certain Intel® Xeon® Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Affected configurations

NVD

Node

intelxeon_platinum_8253_firmwareMatch-

AND

intelxeon_platinum_8253Match-

Node

intelxeon_platinum_8256_firmwareMatch-

AND

intelxeon_platinum_8256Match-

Node

intelxeon_platinum_8260_firmwareMatch-

AND

intelxeon_platinum_8260Match-

Node

intelxeon_platinum_8276_firmwareMatch-

AND

intelxeon_platinum_8276Match-

Node

intelxeon_platinum_8276m_firmwareMatch-

AND

intelxeon_platinum_8276mMatch-

Node

intelxeon_platinum_8276l_firmwareMatch-

AND

intelxeon_platinum_8276lMatch-

Node

intelxeon_platinum_8280l_firmwareMatch-

AND

intelxeon_platinum_8280lMatch-

Node

intelxeon_platinum_8260l_firmwareMatch-

AND

intelxeon_platinum_8260lMatch-

Node

intelxeon_platinum_8280m_firmwareMatch-

AND

intelxeon_platinum_8280mMatch-

Node

intelxeon_platinum_8260m_firmwareMatch-

AND

intelxeon_platinum_8260mMatch-

Node

intelxeon_platinum_8280_firmwareMatch-

AND

intelxeon_platinum_8280Match-

Node

intelxeon_platinum_8260y_firmwareMatch-

AND

intelxeon_platinum_8260yMatch-

Node

intelxeon_platinum_8268_firmwareMatch-

AND

intelxeon_platinum_8268Match-

Node

intelxeon_platinum_8270_firmwareMatch-

AND

intelxeon_platinum_8270Match-

Node

intelxeon_platinum_8274_firmwareMatch-

AND

intelxeon_platinum_8274Match-

Node

intelxeon_platinum_8284_firmwareMatch-

AND

intelxeon_platinum_8284Match-

Node

intelxeon_platinum_9242_firmwareMatch-

AND

intelxeon_platinum_9242Match-

Node

intelxeon_platinum_9282_firmwareMatch-

AND

intelxeon_platinum_9282Match-

Node

intelxeon_platinum_8153_firmwareMatch-

AND

intelxeon_platinum_8153Match-

Node

intelxeon_platinum_8156_firmwareMatch-

AND

intelxeon_platinum_8156Match-

Node

intelxeon_platinum_8158_firmwareMatch-

AND

intelxeon_platinum_8158Match-

Node

intelxeon_platinum_8176_firmwareMatch-

AND

intelxeon_platinum_8176Match-

Node

intelxeon_platinum_8160_firmwareMatch-

AND

intelxeon_platinum_8160Match-

Node

intelxeon_platinum_8164_firmwareMatch-

AND

intelxeon_platinum_8164Match-

Node

intelxeon_platinum_8168_firmwareMatch-

AND

intelxeon_platinum_8168Match-

Node

intelxeon_platinum_8170_firmwareMatch-

AND

intelxeon_platinum_8170Match-

Node

intelxeon_platinum_8180_firmwareMatch-

AND

intelxeon_platinum_8180Match-

Node

intelxeon_platinum_8160t_firmwareMatch-

AND

intelxeon_platinum_8160tMatch-

Node

intelxeon_platinum_8160f_firmwareMatch-

AND

intelxeon_platinum_8160fMatch-

Node

intelxeon_platinum_8176f_firmwareMatch-

AND

intelxeon_platinum_8176fMatch-

Node

intelxeon_gold_6210u_firmwareMatch-

AND

intelxeon_gold_6210uMatch-

Node

intelxeon_gold_6244_firmwareMatch-

AND

intelxeon_gold_6244Match-

Node

intelxeon_gold_6212u_firmwareMatch-

AND

intelxeon_gold_6212uMatch-

Node

intelxeon_gold_6240_firmwareMatch-

AND

intelxeon_gold_6240Match-

Node

intelxeon_gold_5218_firmwareMatch-

AND

intelxeon_gold_5218Match-

Node

intelxeon_gold_6230_firmwareMatch-

AND

intelxeon_gold_6230Match-

Node

intelxeon_gold_5222_firmwareMatch-

AND

intelxeon_gold_5222Match-

Node

intelxeon_gold_6238t_firmwareMatch-

AND

intelxeon_gold_6238tMatch-

Node

intelxeon_gold_6248_firmwareMatch-

AND

intelxeon_gold_6248Match-

Node

intelxeon_gold_6252_firmwareMatch-

AND

intelxeon_gold_6252Match-

Node

intelxeon_gold_6242_firmwareMatch-

AND

intelxeon_gold_6242Match-

Node

intelxeon_gold_6240y_firmwareMatch-

AND

intelxeon_gold_6240yMatch-

Node

intelxeon_gold_5217_firmwareMatch-

AND

intelxeon_gold_5217Match-

Node

intelxeon_gold_6238m_firmwareMatch-

AND

intelxeon_gold_6238mMatch-

Node

intelxeon_gold_5218n_firmwareMatch-

AND

intelxeon_gold_5218nMatch-

Node

intelxeon_gold_6226_firmwareMatch-

AND

intelxeon_gold_6226Match-

Node

intelxeon_gold_6254_firmwareMatch-

AND

intelxeon_gold_6254Match-

Node

intelxeon_gold_5220_firmwareMatch-

AND

intelxeon_gold_5220Match-

Node

intelxeon_gold_6238l_firmwareMatch-

AND

intelxeon_gold_6238lMatch-

Node

intelxeon_gold_5218b_firmwareMatch-

AND

intelxeon_gold_5218bMatch-

Node

intelxeon_gold_6240l_firmwareMatch-

AND

intelxeon_gold_6240lMatch-

Node

intelxeon_gold_6238_firmwareMatch-

AND

intelxeon_gold_6238Match-

Node

intelxeon_gold_6240m_firmwareMatch-

AND

intelxeon_gold_6240mMatch-

Node

intelxeon_gold_5220s_firmwareMatch-

AND

intelxeon_gold_5220sMatch-

Node

intelxeon_gold_5215_firmwareMatch-

AND

intelxeon_gold_5215Match-

Node

intelxeon_gold_6222v_firmwareMatch-

AND

intelxeon_gold_6222vMatch-

Node

intelxeon_gold_6252n_firmwareMatch-

AND

intelxeon_gold_6252nMatch-

Node

intelxeon_gold_5215m_firmwareMatch-

AND

intelxeon_gold_5215mMatch-

Node

intelxeon_gold_6246_firmwareMatch-

AND

intelxeon_gold_6246Match-

Node

intelxeon_gold_5215l_firmwareMatch-

AND

intelxeon_gold_5215lMatch-

Node

intelxeon_gold_5218t_firmwareMatch-

AND

intelxeon_gold_5218tMatch-

Node

intelxeon_gold_5220t_firmwareMatch-

AND

intelxeon_gold_5220tMatch-

Node

intelxeon_gold_6209u_firmwareMatch-

AND

intelxeon_gold_6209uMatch-

Node

intelxeon_gold_6262v_firmwareMatch-

AND

intelxeon_gold_6262vMatch-

Node

intelxeon_gold_5122_firmwareMatch-

AND

intelxeon_gold_5122Match-

Node

intelxeon_gold_6138_firmwareMatch-

AND

intelxeon_gold_6138Match-

Node

intelxeon_gold_6148_firmwareMatch-

AND

intelxeon_gold_6148Match-

Node

intelxeon_gold_5120t_firmwareMatch-

AND

intelxeon_gold_5120tMatch-

Node

intelxeon_gold_6136_firmwareMatch-

AND

intelxeon_gold_6136Match-

Node

intelxeon_gold_6150_firmwareMatch-

AND

intelxeon_gold_6150Match-

Node

intelxeon_gold_6152_firmwareMatch-

AND

intelxeon_gold_6152Match-

Node

intelxeon_gold_6130_firmwareMatch-

AND

intelxeon_gold_6130Match-

Node

intelxeon_gold_6128_firmwareMatch-

AND

intelxeon_gold_6128Match-

Node

intelxeon_gold_5118_firmwareMatch-

AND

intelxeon_gold_5118Match-

Node

intelxeon_gold_6134_firmwareMatch-

AND

intelxeon_gold_6134Match-

Node

intelxeon_gold_6126_firmwareMatch-

AND

intelxeon_gold_6126Match-

Node

intelxeon_gold_5120_firmwareMatch-

AND

intelxeon_gold_5120Match-

Node

intelxeon_gold_5115_firmwareMatch-

AND

intelxeon_gold_5115Match-

Node

intelxeon_gold_6154_firmwareMatch-

AND

intelxeon_gold_6154Match-

Node

intelxeon_gold_6140_firmwareMatch-

AND

intelxeon_gold_6140Match-

Node

intelxeon_gold_6140m_firmwareMatch-

AND

intelxeon_gold_6140mMatch-

Node

intelxeon_gold_6132_firmwareMatch-

AND

intelxeon_gold_6132Match-

Node

intelxeon_gold_6138t_firmwareMatch-

AND

intelxeon_gold_6138tMatch-

Node

intelxeon_gold_6142f_firmwareMatch-

AND

intelxeon_gold_6142fMatch-

Node

intelxeon_gold_6130t_firmwareMatch-

AND

intelxeon_gold_6130tMatch-

Node

intelxeon_gold_6138f_firmwareMatch-

AND

intelxeon_gold_6138fMatch-

Node

intelxeon_gold_6130f_firmwareMatch-

AND

intelxeon_gold_6130fMatch-

Node

intelxeon_gold_6126t_firmwareMatch-

AND

intelxeon_gold_6126tMatch-

Node

intelxeon_gold_6126f_firmwareMatch-

AND

intelxeon_gold_6126fMatch-

Node

intelxeon_gold_6148f_firmwareMatch-

AND

intelxeon_gold_6148fMatch-

Node

intelxeon_gold_6146_firmwareMatch-

AND

intelxeon_gold_6146Match-

Node

intelxeon_gold_6144_firmwareMatch-

AND

intelxeon_gold_6144Match-

Node

intelxeon_silver_4209t_firmwareMatch-

AND

intelxeon_silver_4209tMatch-

Node

intelxeon_silver_4210_firmwareMatch-

AND

intelxeon_silver_4210Match-

Node

intelxeon_silver_4214_firmwareMatch-

AND

intelxeon_silver_4214Match-

Node

intelxeon_silver_4214y_firmwareMatch-

AND

intelxeon_silver_4214yMatch-

Node

intelxeon_silver_4215_firmwareMatch-

AND

intelxeon_silver_4215Match-

Node

intelxeon_silver_4208_firmwareMatch-

AND

intelxeon_silver_4208Match-

Node

intelxeon_silver_4216_firmwareMatch-

AND

intelxeon_silver_4216Match-

Node

intelxeon_silver_4116_firmwareMatch-

AND

intelxeon_silver_4116Match-

Node

intelxeon_silver_4109t_firmwareMatch-

AND

intelxeon_silver_4109tMatch-

Node

intelxeon_silver_4114_firmwareMatch-

AND

intelxeon_silver_4114Match-

Node

intelxeon_silver_4112_firmwareMatch-

AND

intelxeon_silver_4112Match-

Node

intelxeon_silver_4108_firmwareMatch-

AND

intelxeon_silver_4108Match-

Node

intelxeon_silver_4110_firmwareMatch-

AND

intelxeon_silver_4110Match-

Node

intelxeon_bronze_3204_firmwareMatch-

AND

intelxeon_bronze_3204Match-

Node

intelxeon_bronze_3106_firmwareMatch-

AND

intelxeon_bronze_3106Match-

Node

intelxeon_bronze_3104_firmwareMatch-

AND

intelxeon_bronze_3104Match-

Node

intelxeon_d-2187nt_firmwareMatch-

AND

intelxeon_d-2187ntMatch-

Node

intelxeon_d-2183it_firmwareMatch-

AND

intelxeon_d-2183itMatch-

Node

intelxeon_d-2177nt_firmwareMatch-

AND

intelxeon_d-2177ntMatch-

Node

intelxeon_d-2173it_firmwareMatch-

AND

intelxeon_d-2173itMatch-

Node

intelxeon_d-2166nt_firmwareMatch-

AND

intelxeon_d-2166ntMatch-

Node

intelxeon_d-2163it_firmwareMatch-

AND

intelxeon_d-2163itMatch-

Node

intelxeon_d-2161i_firmwareMatch-

AND

intelxeon_d-2161iMatch-

Node

intelxeon_d-2146nt_firmwareMatch-

AND

intelxeon_d-2146ntMatch-

Node

intelxeon_d-2145nt_firmwareMatch-

AND

intelxeon_d-2145ntMatch-

Node

intelxeon_d-2143it_firmwareMatch-

AND

intelxeon_d-2143itMatch-

Node

intelxeon_d-2142it_firmwareMatch-

AND

intelxeon_d-2142itMatch-

Node

intelxeon_d-2141i_firmwareMatch-

AND

intelxeon_d-2141iMatch-

Node

intelxeon_d-2123it_firmwareMatch-

AND

intelxeon_d-2123itMatch-

Node

intelxeon_w-3175x_firmwareMatch-

AND

intelxeon_w-3175xMatch-

Node

intelxeon_w-2195_firmwareMatch-

AND

intelxeon_w-2195Match-

Node

intelxeon_w-2175_firmwareMatch-

AND

intelxeon_w-2175Match-

Node

intelxeon_w-2155_firmwareMatch-

AND

intelxeon_w-2155Match-

Node

intelxeon_w-2145_firmwareMatch-

AND

intelxeon_w-2145Match-

Node

intelxeon_w-2135_firmwareMatch-

AND

intelxeon_w-2135Match-

Node

intelxeon_w-2133_firmwareMatch-

AND

intelxeon_w-2133Match-

Node

intelxeon_w-2125_firmwareMatch-

AND

intelxeon_w-2125Match-

Node

intelxeon_w-2123_firmwareMatch-

AND

intelxeon_w-2123Match-

CPENameOperatorVersion
intel:xeon_platinum_8253_firmwareintel xeon platinum 8253 firmwareeq-

CPE	Name	Operator	Version
intel:xeon_platinum_8253_firmware	intel xeon platinum 8253 firmware	eq	-

CNA Affected

[
  {
    "product": "2019.2 IPU – Intel(R) Processor Security",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "See provided reference"
      }
    ]
  }
]

References

cert-portal.siemens.com/productcert/pdf/ssa-398519.pdf

support.f5.com/csp/article/K34425791?utm_source=f5support&amp%3Butm_medium=RSS

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03971en_us

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00240.html

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2019-0152

prion1 cvelist1 nvd1 f51 intel1 hp1 lenovo2