CVE-2019-0169

Published: Dec 18, 2019Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an unauthenticated user to potentially enable escalation of privileges, information disclosure or denial of service via adjacent access.

Affected (6)

Products: Intel: Converged Security Management Engine Firmware, Trusted Execution Engine Firmware

Intel

2 products

Converged Security Management Engine Firmware

Trusted Execution Engine Firmware

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Intel Converged Security Management Engine Firmware	11.0 ≤ version < 11.8.70
Intel Converged Security Management Engine Firmware	11.10 ≤ version < 11.11.70
Intel Converged Security Management Engine Firmware	11.20 ≤ version < 11.22.70
Intel Converged Security Management Engine Firmware	12.0 ≤ version < 12.0.45
Intel Trusted Execution Engine Firmware	3.0 ≤ version < 3.1.70
Intel Trusted Execution Engine Firmware	4.0 ≤ version < 4.0.20