CVE-2019-0091
No fix known EPSS <1%
Code injection vulnerability in installer for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access.
Products: intel converged_security_and_management_engine, intel trusted_execution_technology