Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-0152

Insufficient memory protection in System Management Mode (SMM) and Intel(R) TXT for certain Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Published

2019-11-14T20:15:11.493

Last Modified

2024-11-21T04:16:21.067

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.7 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

3.9

Impact Score

10.0

Weaknesses

Type: Primary
CWE-119

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	intel	xeon_platinum_8253_firmware	-	Yes
Hardware	intel	xeon_platinum_8253	-	No
Operating System	intel	xeon_platinum_8256_firmware	-	Yes
Hardware	intel	xeon_platinum_8256	-	No
Operating System	intel	xeon_platinum_8260_firmware	-	Yes
Hardware	intel	xeon_platinum_8260	-	No
Operating System	intel	xeon_platinum_8276_firmware	-	Yes
Hardware	intel	xeon_platinum_8276	-	No
Operating System	intel	xeon_platinum_8276m_firmware	-	Yes
Hardware	intel	xeon_platinum_8276m	-	No
Operating System	intel	xeon_platinum_8276l_firmware	-	Yes
Hardware	intel	xeon_platinum_8276l	-	No
Operating System	intel	xeon_platinum_8280l_firmware	-	Yes
Hardware	intel	xeon_platinum_8280l	-	No
Operating System	intel	xeon_platinum_8260l_firmware	-	Yes
Hardware	intel	xeon_platinum_8260l	-	No
Operating System	intel	xeon_platinum_8280m_firmware	-	Yes
Hardware	intel	xeon_platinum_8280m	-	No
Operating System	intel	xeon_platinum_8260m_firmware	-	Yes
Hardware	intel	xeon_platinum_8260m	-	No
Operating System	intel	xeon_platinum_8280_firmware	-	Yes
Hardware	intel	xeon_platinum_8280	-	No
Operating System	intel	xeon_platinum_8260y_firmware	-	Yes
Hardware	intel	xeon_platinum_8260y	-	No
Operating System	intel	xeon_platinum_8268_firmware	-	Yes
Hardware	intel	xeon_platinum_8268	-	No
Operating System	intel	xeon_platinum_8270_firmware	-	Yes
Hardware	intel	xeon_platinum_8270	-	No
Operating System	intel	xeon_platinum_8274_firmware	-	Yes
Hardware	intel	xeon_platinum_8274	-	No
Operating System	intel	xeon_platinum_8284_firmware	-	Yes
Hardware	intel	xeon_platinum_8284	-	No
Operating System	intel	xeon_platinum_9242_firmware	-	Yes
Hardware	intel	xeon_platinum_9242	-	No
Operating System	intel	xeon_platinum_9282_firmware	-	Yes
Hardware	intel	xeon_platinum_9282	-	No
Operating System	intel	xeon_platinum_8153_firmware	-	Yes
Hardware	intel	xeon_platinum_8153	-	No
Operating System	intel	xeon_platinum_8156_firmware	-	Yes
Hardware	intel	xeon_platinum_8156	-	No
Operating System	intel	xeon_platinum_8158_firmware	-	Yes
Hardware	intel	xeon_platinum_8158	-	No
Operating System	intel	xeon_platinum_8176_firmware	-	Yes
Hardware	intel	xeon_platinum_8176	-	No
Operating System	intel	xeon_platinum_8160_firmware	-	Yes
Hardware	intel	xeon_platinum_8160	-	No
Operating System	intel	xeon_platinum_8164_firmware	-	Yes
Hardware	intel	xeon_platinum_8164	-	No
Operating System	intel	xeon_platinum_8168_firmware	-	Yes
Hardware	intel	xeon_platinum_8168	-	No
Operating System	intel	xeon_platinum_8170_firmware	-	Yes
Hardware	intel	xeon_platinum_8170	-	No
Operating System	intel	xeon_platinum_8180_firmware	-	Yes
Hardware	intel	xeon_platinum_8180	-	No
Operating System	intel	xeon_platinum_8160t_firmware	-	Yes
Hardware	intel	xeon_platinum_8160t	-	No
Operating System	intel	xeon_platinum_8160f_firmware	-	Yes
Hardware	intel	xeon_platinum_8160f	-	No
Operating System	intel	xeon_platinum_8176f_firmware	-	Yes
Hardware	intel	xeon_platinum_8176f	-	No
Operating System	intel	xeon_gold_6210u_firmware	-	Yes
Hardware	intel	xeon_gold_6210u	-	No
Operating System	intel	xeon_gold_6244_firmware	-	Yes
Hardware	intel	xeon_gold_6244	-	No
Operating System	intel	xeon_gold_6212u_firmware	-	Yes
Hardware	intel	xeon_gold_6212u	-	No
Operating System	intel	xeon_gold_6240_firmware	-	Yes
Hardware	intel	xeon_gold_6240	-	No
Operating System	intel	xeon_gold_5218_firmware	-	Yes
Hardware	intel	xeon_gold_5218	-	No
Operating System	intel	xeon_gold_6230_firmware	-	Yes
Hardware	intel	xeon_gold_6230	-	No
Operating System	intel	xeon_gold_5222_firmware	-	Yes
Hardware	intel	xeon_gold_5222	-	No
Operating System	intel	xeon_gold_6238t_firmware	-	Yes
Hardware	intel	xeon_gold_6238t	-	No
Operating System	intel	xeon_gold_6248_firmware	-	Yes
Hardware	intel	xeon_gold_6248	-	No
Operating System	intel	xeon_gold_6252_firmware	-	Yes
Hardware	intel	xeon_gold_6252	-	No
Operating System	intel	xeon_gold_6242_firmware	-	Yes
Hardware	intel	xeon_gold_6242	-	No
Operating System	intel	xeon_gold_6240y_firmware	-	Yes
Hardware	intel	xeon_gold_6240y	-	No
Operating System	intel	xeon_gold_5217_firmware	-	Yes
Hardware	intel	xeon_gold_5217	-	No
Operating System	intel	xeon_gold_6238m_firmware	-	Yes
Hardware	intel	xeon_gold_6238m	-	No
Operating System	intel	xeon_gold_5218n_firmware	-	Yes
Hardware	intel	xeon_gold_5218n	-	No
Operating System	intel	xeon_gold_6226_firmware	-	Yes
Hardware	intel	xeon_gold_6226	-	No
Operating System	intel	xeon_gold_6254_firmware	-	Yes
Hardware	intel	xeon_gold_6254	-	No
Operating System	intel	xeon_gold_5220_firmware	-	Yes
Hardware	intel	xeon_gold_5220	-	No
Operating System	intel	xeon_gold_6238l_firmware	-	Yes
Hardware	intel	xeon_gold_6238l	-	No
Operating System	intel	xeon_gold_5218b_firmware	-	Yes
Hardware	intel	xeon_gold_5218b	-	No
Operating System	intel	xeon_gold_6240l_firmware	-	Yes
Hardware	intel	xeon_gold_6240l	-	No
Operating System	intel	xeon_gold_6238_firmware	-	Yes
Hardware	intel	xeon_gold_6238	-	No
Operating System	intel	xeon_gold_6240m_firmware	-	Yes
Hardware	intel	xeon_gold_6240m	-	No
Operating System	intel	xeon_gold_5220s_firmware	-	Yes
Hardware	intel	xeon_gold_5220s	-	No
Operating System	intel	xeon_gold_5215_firmware	-	Yes
Hardware	intel	xeon_gold_5215	-	No
Operating System	intel	xeon_gold_6222v_firmware	-	Yes
Hardware	intel	xeon_gold_6222v	-	No
Operating System	intel	xeon_gold_6252n_firmware	-	Yes
Hardware	intel	xeon_gold_6252n	-	No
Operating System	intel	xeon_gold_5215m_firmware	-	Yes
Hardware	intel	xeon_gold_5215m	-	No
Operating System	intel	xeon_gold_6246_firmware	-	Yes
Hardware	intel	xeon_gold_6246	-	No
Operating System	intel	xeon_gold_5215l_firmware	-	Yes
Hardware	intel	xeon_gold_5215l	-	No
Operating System	intel	xeon_gold_5218t_firmware	-	Yes
Hardware	intel	xeon_gold_5218t	-	No
Operating System	intel	xeon_gold_5220t_firmware	-	Yes
Hardware	intel	xeon_gold_5220t	-	No
Operating System	intel	xeon_gold_6209u_firmware	-	Yes
Hardware	intel	xeon_gold_6209u	-	No
Operating System	intel	xeon_gold_6262v_firmware	-	Yes
Hardware	intel	xeon_gold_6262v	-	No
Operating System	intel	xeon_gold_5122_firmware	-	Yes
Hardware	intel	xeon_gold_5122	-	No
Operating System	intel	xeon_gold_6138_firmware	-	Yes
Hardware	intel	xeon_gold_6138	-	No
Operating System	intel	xeon_gold_6148_firmware	-	Yes
Hardware	intel	xeon_gold_6148	-	No
Operating System	intel	xeon_gold_5120t_firmware	-	Yes
Hardware	intel	xeon_gold_5120t	-	No
Operating System	intel	xeon_gold_6136_firmware	-	Yes
Hardware	intel	xeon_gold_6136	-	No
Operating System	intel	xeon_gold_6150_firmware	-	Yes
Hardware	intel	xeon_gold_6150	-	No
Operating System	intel	xeon_gold_6152_firmware	-	Yes
Hardware	intel	xeon_gold_6152	-	No
Operating System	intel	xeon_gold_6130_firmware	-	Yes
Hardware	intel	xeon_gold_6130	-	No
Operating System	intel	xeon_gold_6128_firmware	-	Yes
Hardware	intel	xeon_gold_6128	-	No
Operating System	intel	xeon_gold_5118_firmware	-	Yes
Hardware	intel	xeon_gold_5118	-	No
Operating System	intel	xeon_gold_6134_firmware	-	Yes
Hardware	intel	xeon_gold_6134	-	No
Operating System	intel	xeon_gold_6126_firmware	-	Yes
Hardware	intel	xeon_gold_6126	-	No
Operating System	intel	xeon_gold_5120_firmware	-	Yes
Hardware	intel	xeon_gold_5120	-	No
Operating System	intel	xeon_gold_5115_firmware	-	Yes
Hardware	intel	xeon_gold_5115	-	No
Operating System	intel	xeon_gold_6154_firmware	-	Yes
Hardware	intel	xeon_gold_6154	-	No
Operating System	intel	xeon_gold_6140_firmware	-	Yes
Hardware	intel	xeon_gold_6140	-	No
Operating System	intel	xeon_gold_6140m_firmware	-	Yes
Hardware	intel	xeon_gold_6140m	-	No
Operating System	intel	xeon_gold_6132_firmware	-	Yes
Hardware	intel	xeon_gold_6132	-	No
Operating System	intel	xeon_gold_6138t_firmware	-	Yes
Hardware	intel	xeon_gold_6138t	-	No
Operating System	intel	xeon_gold_6142f_firmware	-	Yes
Hardware	intel	xeon_gold_6142f	-	No
Operating System	intel	xeon_gold_6130t_firmware	-	Yes
Hardware	intel	xeon_gold_6130t	-	No
Operating System	intel	xeon_gold_6138f_firmware	-	Yes
Hardware	intel	xeon_gold_6138f	-	No
Operating System	intel	xeon_gold_6130f_firmware	-	Yes
Hardware	intel	xeon_gold_6130f	-	No
Operating System	intel	xeon_gold_6126t_firmware	-	Yes
Hardware	intel	xeon_gold_6126t	-	No
Operating System	intel	xeon_gold_6126f_firmware	-	Yes
Hardware	intel	xeon_gold_6126f	-	No
Operating System	intel	xeon_gold_6148f_firmware	-	Yes
Hardware	intel	xeon_gold_6148f	-	No
Operating System	intel	xeon_gold_6146_firmware	-	Yes
Hardware	intel	xeon_gold_6146	-	No
Operating System	intel	xeon_gold_6144_firmware	-	Yes
Hardware	intel	xeon_gold_6144	-	No
Operating System	intel	xeon_silver_4209t_firmware	-	Yes
Hardware	intel	xeon_silver_4209t	-	No
Operating System	intel	xeon_silver_4210_firmware	-	Yes
Hardware	intel	xeon_silver_4210	-	No
Operating System	intel	xeon_silver_4214_firmware	-	Yes
Hardware	intel	xeon_silver_4214	-	No
Operating System	intel	xeon_silver_4214y_firmware	-	Yes
Hardware	intel	xeon_silver_4214y	-	No
Operating System	intel	xeon_silver_4215_firmware	-	Yes
Hardware	intel	xeon_silver_4215	-	No
Operating System	intel	xeon_silver_4208_firmware	-	Yes
Hardware	intel	xeon_silver_4208	-	No
Operating System	intel	xeon_silver_4216_firmware	-	Yes
Hardware	intel	xeon_silver_4216	-	No
Operating System	intel	xeon_silver_4116_firmware	-	Yes
Hardware	intel	xeon_silver_4116	-	No
Operating System	intel	xeon_silver_4109t_firmware	-	Yes
Hardware	intel	xeon_silver_4109t	-	No
Operating System	intel	xeon_silver_4114_firmware	-	Yes
Hardware	intel	xeon_silver_4114	-	No
Operating System	intel	xeon_silver_4112_firmware	-	Yes
Hardware	intel	xeon_silver_4112	-	No
Operating System	intel	xeon_silver_4108_firmware	-	Yes
Hardware	intel	xeon_silver_4108	-	No
Operating System	intel	xeon_silver_4110_firmware	-	Yes
Hardware	intel	xeon_silver_4110	-	No
Operating System	intel	xeon_bronze_3204_firmware	-	Yes
Hardware	intel	xeon_bronze_3204	-	No
Operating System	intel	xeon_bronze_3106_firmware	-	Yes
Hardware	intel	xeon_bronze_3106	-	No
Operating System	intel	xeon_bronze_3104_firmware	-	Yes
Hardware	intel	xeon_bronze_3104	-	No
Operating System	intel	xeon_d-2187nt_firmware	-	Yes
Hardware	intel	xeon_d-2187nt	-	No
Operating System	intel	xeon_d-2183it_firmware	-	Yes
Hardware	intel	xeon_d-2183it	-	No
Operating System	intel	xeon_d-2177nt_firmware	-	Yes
Hardware	intel	xeon_d-2177nt	-	No
Operating System	intel	xeon_d-2173it_firmware	-	Yes
Hardware	intel	xeon_d-2173it	-	No
Operating System	intel	xeon_d-2166nt_firmware	-	Yes
Hardware	intel	xeon_d-2166nt	-	No
Operating System	intel	xeon_d-2163it_firmware	-	Yes
Hardware	intel	xeon_d-2163it	-	No
Operating System	intel	xeon_d-2161i_firmware	-	Yes
Hardware	intel	xeon_d-2161i	-	No
Operating System	intel	xeon_d-2146nt_firmware	-	Yes
Hardware	intel	xeon_d-2146nt	-	No
Operating System	intel	xeon_d-2145nt_firmware	-	Yes
Hardware	intel	xeon_d-2145nt	-	No
Operating System	intel	xeon_d-2143it_firmware	-	Yes
Hardware	intel	xeon_d-2143it	-	No
Operating System	intel	xeon_d-2142it_firmware	-	Yes
Hardware	intel	xeon_d-2142it	-	No
Operating System	intel	xeon_d-2141i_firmware	-	Yes
Hardware	intel	xeon_d-2141i	-	No
Operating System	intel	xeon_d-2123it_firmware	-	Yes
Hardware	intel	xeon_d-2123it	-	No
Operating System	intel	xeon_w-3175x_firmware	-	Yes
Hardware	intel	xeon_w-3175x	-	No
Operating System	intel	xeon_w-2195_firmware	-	Yes
Hardware	intel	xeon_w-2195	-	No
Operating System	intel	xeon_w-2175_firmware	-	Yes
Hardware	intel	xeon_w-2175	-	No
Operating System	intel	xeon_w-2155_firmware	-	Yes
Hardware	intel	xeon_w-2155	-	No
Operating System	intel	xeon_w-2145_firmware	-	Yes
Hardware	intel	xeon_w-2145	-	No
Operating System	intel	xeon_w-2135_firmware	-	Yes
Hardware	intel	xeon_w-2135	-	No
Operating System	intel	xeon_w-2133_firmware	-	Yes
Hardware	intel	xeon_w-2133	-	No
Operating System	intel	xeon_w-2125_firmware	-	Yes
Hardware	intel	xeon_w-2125	-	No
Operating System	intel	xeon_w-2123_firmware	-	Yes
Hardware	intel	xeon_w-2123	-	No

References

https://cert-portal.siemens.com/productcert/pdf/ssa-398519.pdf ([email protected])
https://support.f5.com/csp/article/K34425791?utm_source=f5support&amp%3Butm_medium=RSS ([email protected])
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03971en_us Third Party Advisory ([email protected])
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00240.html Vendor Advisory ([email protected])
https://cert-portal.siemens.com/productcert/pdf/ssa-398519.pdf (af854a3a-2127-422b-91ae-364da2661108)
https://support.f5.com/csp/article/K34425791?utm_source=f5support&amp%3Butm_medium=RSS (af854a3a-2127-422b-91ae-364da2661108)
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03971en_us Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00240.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)