PT-2019-11176 · Intel · Intel Sps

Publicado 2019-05-17 · Atualizado 2019-06-19 · CVE-2019-0089

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Intel(R) SPS versions prior to SPS E5 04.00.04.381.0 Intel(R) SPS versions prior to SPS E3 04.01.04.054.0 Intel(R) SPS versions prior to SPS SoC-A 04.00.04.181.0 Intel(R) SPS versions prior to SPS SoC-X 04.00.04.086.0

Description: The issue is related to improper data sanitization in a subsystem, which may allow a privileged user to potentially enable escalation of privilege via local access.

Recommendations: For versions prior to SPS E5 04.00.04.381.0, update to version SPS E5 04.00.04.381.0 or later. For versions prior to SPS E3 04.01.04.054.0, update to version SPS E3 04.01.04.054.0 or later. For versions prior to SPS SoC-A 04.00.04.181.0, update to version SPS SoC-A 04.00.04.181.0 or later. For versions prior to SPS SoC-X 04.00.04.086.0, update to version SPS SoC-X 04.00.04.086.0 or later.

Correção

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

CVE-2019-0089

Produtos afetados

Intel Sps

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-0089 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-0089 · Aviso do Fabricante
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html · Aviso do Fabricante
• https://support.f5.com/csp/article/K47234311 · Nota