CVEvulnerability
CVE-2019-0152
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-11-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Insufficient memory protection in System Management Mode (SMM) and Intel(R) TXT for certain Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Affected configurations
• intel xeon platinum 8253 firmware
• intel xeon platinum 8256 firmware
• intel xeon platinum 8260 firmware
• intel xeon platinum 8276 firmware
• intel xeon platinum 8276m firmware
• intel xeon platinum 8276l firmware
• intel xeon platinum 8280l firmware
• intel xeon platinum 8260l firmware
• intel xeon platinum 8280m firmware
• intel xeon platinum 8260m firmware
• intel xeon platinum 8280 firmware
• intel xeon platinum 8260y firmware
• intel xeon platinum 8268 firmware
• intel xeon platinum 8270 firmware
• intel xeon platinum 8274 firmware
• intel xeon platinum 8284 firmware
• intel xeon platinum 9242 firmware
• intel xeon platinum 9282 firmware
• intel xeon platinum 8153 firmware
• intel xeon platinum 8156 firmware
• intel xeon platinum 8158 firmware
• intel xeon platinum 8176 firmware
• intel xeon platinum 8160 firmware
• intel xeon platinum 8164 firmware
• intel xeon platinum 8168 firmware
• intel xeon platinum 8170 firmware
• intel xeon platinum 8180 firmware
• intel xeon platinum 8160t firmware
• intel xeon platinum 8160f firmware
• intel xeon platinum 8176f firmware
• intel xeon gold 6210u firmware
• intel xeon gold 6244 firmware
• intel xeon gold 6212u firmware
• intel xeon gold 6240 firmware
• intel xeon gold 5218 firmware
• intel xeon gold 6230 firmware
• intel xeon gold 5222 firmware
• intel xeon gold 6238t firmware
• intel xeon gold 6248 firmware
• intel xeon gold 6252 firmware
• intel xeon gold 6242 firmware
• intel xeon gold 6240y firmware
• intel xeon gold 5217 firmware
• intel xeon gold 6238m firmware
• intel xeon gold 5218n firmware
• intel xeon gold 6226 firmware
• intel xeon gold 6254 firmware
• intel xeon gold 5220 firmware
• intel xeon gold 6238l firmware
• intel xeon gold 5218b firmware
• intel xeon gold 6240l firmware
• intel xeon gold 6238 firmware
• intel xeon gold 6240m firmware
• intel xeon gold 5220s firmware
• intel xeon gold 5215 firmware
• intel xeon gold 6222v firmware
• intel xeon gold 6252n firmware
• intel xeon gold 5215m firmware
• intel xeon gold 6246 firmware
• intel xeon gold 5215l firmware
… and 70 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-398519.pdf cert-portal.siemens.com
- https://support.f5.com/csp/article/K34425791?utm_source=f5support&%3Butm_medium=RSS support.f5.com
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03971en_us Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00240.html Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-398519.pdf cert-portal.siemens.com
- https://support.f5.com/csp/article/K34425791?utm_source=f5support&%3Butm_medium=RSS support.f5.com
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03971en_us Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00240.html Vendor Advisory