Lucene search

K
lenovoLenovoLENOVO:PS500244-NOSID
HistoryMay 14, 2019 - 11:57 a.m.

Intel Firmware Vulnerabilities - Lenovo Support US

2019-05-1411:57:39
support.lenovo.com
94

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

10.2%

Lenovo Security Advisory: LEN-26294

Potential Impact: Privilege escalation, denial of service

Severity: High

Scope of Impact: Industry-wide

CVE Identifier: CVE-2019-0119 , CVE-2019-0120 , CVE-2019-0126

Summary Description:

Potential security vulnerabilities in Intel firmware may allow for escalation of privilege or denial of service.

Mitigation Strategy for Customers (what you should do to protect yourself):

Intel recommends upgrading to the firmware version (or newer) indicated for your model in the Product Impact section below.

Product Impact:

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

10.2%

Related for LENOVO:PS500244-NOSID