high7.8
CVE-2019-0086
Insufficient access control vulnerability in Dynamic Application Loader software for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Int…
Impact
Insufficient access control vulnerability in Dynamic Application Loader software for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Converged Security Management Engine Firmware | from 11.0 before 11.8.65 from 11.10 before 11.11.65 from 11.20 before 11.22.65 from 12.0 before 12.0.35 |
| Intel | Trusted Execution Engine Firmware | from 3.0 before 3.1.65 from 4.0 through 4.0.15 |
Weakness classification
References
- NVD record
- CVE.org record
- https://danishcyberdefence.dk/blog/dal
- https://support.f5.com/csp/article/K35815741
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html
- https://danishcyberdefence.dk/blog/dal
- https://support.f5.com/csp/article/K35815741
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html