2 lines
4.1 KiB
JSON
2 lines
4.1 KiB
JSON
{"affected":[{"affectedData":[{"product":"Intel(R) Converged Security & Management Engine (CSME), Intel (R) Trusted Execution Engine Interface (TXE)","vendor":"n/a","versions":[{"status":"affected","version":"Versions before CSME 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15."}]}],"source":"secure@intel.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:intel:converged_security_and_management_engine:*:*:*:*:*:*:*:*","matchCriteriaId":"CB2C110D-88CC-47EF-87F7-5925553470D7","versionEndExcluding":"11.8.65","versionStartIncluding":"11.8.0","vulnerable":true},{"criteria":"cpe:2.3:a:intel:converged_security_and_management_engine:*:*:*:*:*:*:*:*","matchCriteriaId":"6E57A76A-714A-42C6-A364-394FCE12F636","versionEndExcluding":"11.11.65","versionStartIncluding":"11.11.0","vulnerable":true},{"criteria":"cpe:2.3:a:intel:converged_security_and_management_engine:*:*:*:*:*:*:*:*","matchCriteriaId":"1104A893-6E27-4908-8BA1-3A1EF334BD8B","versionEndExcluding":"11.22.65","versionStartIncluding":"11.22.0","vulnerable":true},{"criteria":"cpe:2.3:a:intel:converged_security_and_management_engine:*:*:*:*:*:*:*:*","matchCriteriaId":"E2724FD1-2375-40A9-BAEE-0D7AAF91F329","versionEndExcluding":"12.0.35","versionStartIncluding":"12.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:intel:trusted_execution_technology:*:*:*:*:*:*:*:*","matchCriteriaId":"DF138E2C-FCDE-4A13-81EB-27372AB0F1C2","versionEndExcluding":"3.1.65","versionStartIncluding":"3.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:intel:trusted_execution_technology:*:*:*:*:*:*:*:*","matchCriteriaId":"59273D14-642F-4891-A28C-4E4752044E69","versionEndExcluding":"4.0.15","versionStartIncluding":"4.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Code injection vulnerability in installer for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access."},{"lang":"es","value":"Vulnerabilidad de inyección de código en el instalador para Intel (R) CSME anterior a las versiones 11.8.65, 11.11.65, 11.22.65, 12.0.35 e Intel (R) TXE versiones 3.1.65, 4.0.15 puede permitir que un usuario sin privilegios habilite potencialmente un aumento de privilegios por medio de un acceso local."}],"id":"CVE-2019-0091","lastModified":"2026-06-17T02:07:41.087","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":7.2,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":3.9,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-05-17T16:29:01.017","references":[{"source":"secure@intel.com","url":"https://support.f5.com/csp/article/K21423526"},{"source":"secure@intel.com","tags":["Vendor Advisory"],"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://support.f5.com/csp/article/K21423526"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html"}],"sourceIdentifier":"secure@intel.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"nvd@nist.gov","type":"Primary"}]}
|