Intel Fixes Critical, High-Severity Flaws Across Several Products

Intel has issued an updated advisory for more than 30 fixes addressing vulnerabilities across various products – including a critical flaw in Intel’s converged security and management engine CSME that could enable privilege-escalation. The bug CVE-2019-0153 exists in a subsystem of Intel CSME,...

CVE-2019-0153

CVE-2019-0153 is an Intel CSME buffer overflow vulnerability affecting CSME 12.0.0–12.0.34. An unauthenticated, remote attacker could potentially escalate privileges via network access. The strongest documented impact is privilege escalation with high/critical impact in CVSS terms (CVSSv3 base sc...