NetSight
high7.8

CVE-2019-0091

Code injection vulnerability in installer for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an u…

Impact

Code injection vulnerability in installer for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access.

Affected products

VendorProductAffected versions
IntelConverged Security And Management Engine
from 11.8.0 before 11.8.65
from 11.11.0 before 11.11.65
from 11.22.0 before 11.22.65
from 12.0 before 12.0.35
IntelTrusted Execution Technology
from 3.1.0 before 3.1.65
from 4.0 before 4.0.15

Weakness classification

References