CVE-2019-0169

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an unauthenticated user to potentially enable escalation of privileges, information disclosure or denial of service via adjacent access.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Dec 18, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-01706.7Buffer overflow in subsystem in Intel(R) DAL before version 12.0.35 may allow a privileged user to potentially enable escalation of privilegCVE-2019-01717.8Improper directory permissions in the installer for Intel(R) Quartus(R) software may allow an authenticated user to potentially enable escalCVE-2019-01729.8A logic issue in Intel Unite(R) Client for Android prior to version 4.0 may allow a remote attacker to potentially enable escalation of privCVE-2019-01737.6Authentication bypass in the web console for Intel(R) Raid Web Console 2 all versions may allow an unauthenticated attacker to potentially eCVE-2019-01743.3Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information disclCVE-2019-01754.4Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information CVE-2019-01774.4Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information CVE-2019-01783.6Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information CVE-2019-01794.4Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information CVE-2019-01804.4Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information CVE-2019-01816.7Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information CVE-2019-01823.3Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information
CVE-2019-0169: High severity, CVSS 8.8 | Vulnix