Input validation

2019-12-1822:15:00

PRIOn knowledge base

www.prio-n.com

0.0004 Low

EPSS

Percentile

12.6%

JSON

Insufficient input validation in subsystem for Intel® CSME before versions 12.0.45 and 13.0.10 may allow a privileged user to potentially enable escalation of privilege via local access.

CPENameOperatorVersion
converged_security_management_engine_firmwarege12.0
converged_security_management_engine_firmwarelt12.0.45
converged_security_management_engine_firmwarege13.0
converged_security_management_engine_firmwarelt13.0.10

Name	Operator	Version
converged_security_management_engine_firmware	ge	12.0
converged_security_management_engine_firmware	lt	12.0.45
converged_security_management_engine_firmware	ge	13.0
converged_security_management_engine_firmware	lt	13.0.10

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html

0.0004 Low

EPSS

Percentile

12.6%

JSON

Related for PRION:CVE-2019-11108