CVE-2019-14598

🗓️ 13 Feb 2020 18:21:27Reported by intelType

Improper Authentication in Intel(R) CSME may enable escalation of privilege, denial of service, or information disclosure

Reporter	Title	Published	Views	Family All 12
CNVD	Intel CSME Incorrect Authentication Error Vulnerability	12 Feb 202000:00	–	cnvd
Cvelist	CVE-2019-14598	13 Feb 202018:21	–	cvelist
EUVD	EUVD-2019-5759	7 Oct 202500:30	–	euvd
F5 Networks	K98394530: Intel CPU vulnerability CVE-2019-14598	21 Feb 202320:02	–	f5
Hewlett-Packard	HPSBHF03651 rev. 4 - Intel® CSME February 2020 Security Update	10 Feb 202000:00	–	hp
Intel	Intel® CSME Advisory	11 Feb 202000:00	–	intel
Lenovo	Intel CSME Vulnerability - Lenovo Support US	8 Feb 202022:30	–	lenovo
Lenovo	Intel CSME Vulnerability - Lenovo Support US	8 Feb 202022:30	–	lenovo
NVD	CVE-2019-14598	13 Feb 202019:15	–	nvd
Prion	Authentication flaw	13 Feb 202019:15	–	prion

NVD

Node

intel converged_security_management_engine_firmwareRange12.0–12.0.48-

intel converged_security_management_engine_firmwareRange12.0–12.0.56iot

intel converged_security_management_engine_firmwareRange13.0–13.0.20-

intel converged_security_management_engine_firmwareRange14.0–14.0.10-

Node

netapp steelstore_cloud_integrated_storageMatch-

[
  {
    "product": "Intel(R) CSME",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "versions 12.0 through 12.0.48 (IOT only: 12.0.56), versions 13.0 through 13.0.20, versions 14.0 through 14.0.10"
      }
    ]
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00307.html
security	www.security.netapp.com/advisory/ntap-20200221-0005/

21 Nov 2024 04:27Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24.6

CVSS 3.16.7

EPSS0.00255

CWE-287