CVE-2019-0093

No fix known EPSS <1%

Insufficient data sanitization vulnerability in HECI subsystem for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow a privileged user to potentially enable information disclosure via local access.

Published 2019-05-17 · CVE record · OSV

Products: intel converged_security_and_management_engine