CVE-2019-0099

🗓️ 17 May 2019 15:41:38Reported by intelType

Insufficient access control in Intel(R) SP

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of Intel Server Platform Services’ microprogramming software, related to deficiencies in access control, allows attackers to enhance their privileges.	6 Jun 201900:00	–	bdu_fstec
Circl	CVE-2019-0099	27 May 201904:00	–	circl
CNVD	Intel Server Platform Services Privilege Permission and Access Control Issues Vulnerability	22 May 201900:00	–	cnvd
CVE	CVE-2019-0099	17 May 201915:41	–	cve
EUVD	EUVD-2019-0906	7 Oct 202500:30	–	euvd
F5 Networks	K30105730: Intel SPS vulnerability CVE-2019-0099	21 Feb 202319:58	–	f5
F5 Networks	K42117350: Intel-SA-00213: Intel CSME, Intel SPS, Intel TXE, Intel DAL, and Intel AMT vulnerabilities	21 Feb 202318:55	–	f5
Hewlett-Packard	HPSBHF03616 rev. 4 - Intel 2019.1 CSME, Trusted Execution Engine (TXE), Active Management Technology (AMT) Security Updates	13 May 201900:00	–	hp
Intel	Intel® CSME, Intel® SPS, Intel® TXE, Intel® DAL, and Intel® AMT 2019.1 QSR Advisory	14 Apr 202000:00	–	intel
Lenovo	Intel CSME, Server Platform Services, Trusted Execution Engine and Intel Active Management Technology Vulnerabilities - Lenovo Support US	14 May 201912:22	–	lenovo

[
  {
    "product": "Intel(R) Server Platform Services (SPS), Intel (R) Trusted Execution Engine Interface (TXE)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions before SPS_E3_05.00.04.027.0."
      }
    ]
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html
support	www.support.f5.com/csp/article/K30105730

20 Jun 2019 16:06Current

6.8Medium risk

Vulners AI Score6.8

EPSS0.00064