CVE-2019-0170

MEDIUM

Intel Converged Security Management Engine Firmware < 12.0.35 - Buffer Overflow via Local Access

Title source: llm
STIX 2.1

Description

Buffer overflow in subsystem in Intel(R) DAL before version 12.0.35 may allow a privileged user to potentially enable escalation of privilege via local access.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
https://support.f5.com/csp/article/K51470205

Scores

CVSS v3 6.7
EPSS 0.0007
EPSS Percentile 21.5%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (1)
intel/converged_security_management_engine_firmware < 12.0.35
Published May 17, 2019
Tracked Since Feb 18, 2026