VulnerabilityModified

CVE-2019-0098

Logic bug vulnerability in subsystem for Intel(R) CSME before version 12.0.35, Intel(R) TXE before 3.1.65, 4.0.15 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

MEDIUM 6.8EPSS 0.47%

Does this matter?

Lower severity and a low EPSS score (0.47%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 3.0: 6.8 MEDIUMCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.47% probability · 40th percentile
CISA KEV: Not listed
Affected: intel/converged security management engine firmware · intel/trusted execution engine firmware
Source: secure@intel.com

References

https://support.f5.com/csp/article/K10522033
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.htmlVendor Advisory
https://support.f5.com/csp/article/K10522033
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.htmlVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.