CVE-2019-0090

—

CVSS 3.1

7.1 high

EPSS

<1%p29

Published

May 17, 2019 (May 17, 2019)

Modified

Jun 17, 2026

Description

Insufficient access control vulnerability in subsystem for Intel(R) CSME before versions 11.x, 12.0.35 Intel(R) TXE 3.x, 4.x, Intel(R) Server Platform Services 3.x, 4.x, Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Vendors: intel
Products: converged security and management engine, server platform services
Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news2 stories

This Unpatchable Flaw Affects All Intel CPUs Released in Last 5 Years

The Hacker NewsMar 6, 20:47 UTC · Mar 6, 2020Vulnerability CVE-2019-0090

CVE-2019-0090 flaw affects Intel Chips released in the last 5 years

Security AffairsMar 7, 13:25 UTC · Mar 7, 2020Vulnerability CVE-2019-0090