CVE-2019-0090

높음 7.1CVE-2019-0090 · Published 17/05/2019 · updated 17/06/2026

요약

CVE-2019-0090은(는) converged security and management engine (intel), server platform services (intel)에 영향을 주는 높음 (CVSS 7.1) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.36%, 전체 취약점의 29.7%보다 높음.
조치: 12.0.35, sps_e3_05.00.04.027.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
converged security and management engine intel	`< 12.0.35`	`12.0.35`
server platform services intel	`< sps_e3_05.00.04.027.0`	`sps_e3_05.00.04.027.0`

Description

Insufficient access control vulnerability in subsystem for Intel(R) CSME before versions 11.x, 12.0.35 Intel(R) TXE 3.x, 4.x, Intel(R) Server Platform Services 3.x, 4.x, Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

References

support.f5.com/csp/article/K59145983 · Third Party Advisory
intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html · Vendor Advisory

converged security and management engine의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

요약

CVE-2019-0090은(는) converged security and management engine (intel), server platform services (intel)에 영향을 주는 높음 (CVSS 7.1) 취약점입니다.

향후 30일 내 악용 확률(EPSS): 0.36%, 전체 취약점의 29.7%보다 높음.

조치: 12.0.35, sps_e3_05.00.04.027.0 이상으로 업데이트하세요.

Package

Affected versions

Patched versions

converged security and management engine

intel

< 12.0.35

12.0.35

server platform services

intel

< sps_e3_05.00.04.027.0

sps_e3_05.00.04.027.0

Description

converged security and management engine의 다른 취약점

모두 보기 →