CVE-2019-0091

HIGH 7.8CVE-2019-0091 · Published 17/05/2019 · updated 17/06/2026

In short

CVE-2019-0091 is a HIGH (CVSS 7.8) vulnerability affecting converged security and management engine (intel), trusted execution technology (intel).
Chance of exploitation in the next 30 days (EPSS): 0.52%, higher than 44.1% of all vulnerabilities.
Fix: update to 11.11.65, 11.22.65, 11.8.65, 12.0.35 or later.

Package	Affected versions	Patched versions
converged security and management engine intel	`≥ 11.11.0, < 11.11.65≥ 11.22.0, < 11.22.65≥ 11.8.0, < 11.8.65≥ 12.0, < 12.0.35`	`11.11.6511.22.6511.8.6512.0.35`
trusted execution technology intel	`≥ 3.1.0, < 3.1.65≥ 4.0, < 4.0.15`	`3.1.654.0.15`

Description

Code injection vulnerability in installer for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access.

References

support.f5.com/csp/article/K21423526
intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html · Vendor Advisory

More vulnerabilities in converged security and management engine

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2019-0091 is a HIGH (CVSS 7.8) vulnerability affecting converged security and management engine (intel), trusted execution technology (intel).

Chance of exploitation in the next 30 days (EPSS): 0.52%, higher than 44.1% of all vulnerabilities.

Fix: update to 11.11.65, 11.22.65, 11.8.65, 12.0.35 or later.

Package

Affected versions

Patched versions

converged security and management engine

intel

≥ 11.11.0, < 11.11.65≥ 11.22.0, < 11.22.65≥ 11.8.0, < 11.8.65≥ 12.0, < 12.0.35

11.11.6511.22.6511.8.6512.0.35

trusted execution technology

intel

≥ 3.1.0, < 3.1.65≥ 4.0, < 4.0.15

3.1.654.0.15

More vulnerabilities in converged security and management engine

See all →