medium4.4
CVE-2019-0093
Insufficient data sanitization vulnerability in HECI subsystem for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) SPS before v…
Impact
Insufficient data sanitization vulnerability in HECI subsystem for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow a privileged user to potentially enable information disclosure via local access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Converged Security And Management Engine | from 11.8.0 before 11.8.65 from 11.11.0 before 11.11.65 from 11.22.0 before 11.22.65 from 12.0 before 12.0.35 |