Skip to content
Sign in
Not rated

CVE-2019-0093 Insufficient data sanitization vulnerability in HECI subsystem for Intel(R) CSME before versions 11.8.65, 11.11.65,…

Description

Insufficient data sanitization vulnerability in HECI subsystem for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow a privileged user to potentially enable information disclosure via local access.

Affected products and versions

Product Affected versions Fixed in
Intel(R) Converged Security & Management Engine (CSME), Intel(R) Server Platform Services (SPS) Versions not published

Other CVEs of Intel(R) Converged Security & Management Engine (CSME), Intel(R) Server Platform Services (SPS)

The 2 CVEs of Intel(R) Converged Security & Management Engine (CSME), Intel(R) Server Platform Services (SPS) →
CVE-2019-0090 Insufficient access control vulnerability in subsystem for Intel(R) CSME before versions 11.x, 12.0.35 Intel(R) TXE 3.x,… Not rated
Track this CVE