CVE-2019-14598

Published: Feb 13, 2020Modified: Nov 21, 2024

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Improper Authentication in subsystem in Intel(R) CSME versions 12.0 through 12.0.48 (IOT only: 12.0.56), versions 13.0 through 13.0.20, versions 14.0 through 14.0.10 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access.

Affected (5)

Products: Intel: Converged Security Management Engine Firmware · Netapp: Steelstore Cloud Integrated Storage

Intel

1 product

Converged Security Management Engine Firmware

Netapp

1 product

Steelstore Cloud Integrated Storage

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Intel Converged Security Management Engine Firmware	From 12.0 to 12.0.48
Intel Converged Security Management Engine Firmware	From 13.0 to 13.0.20
Intel Converged Security Management Engine Firmware	From 14.0 to 14.0.10
Intel Converged Security Management Engine Firmware	From 12.0 to 12.0.56