PT-2019-2358 · Intel · Intel Unite Client

Publicado 2019-05-14 · Atualizado 2022-04-27 · CVE-2019-0132

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel Unite Client versions prior to 3.3.176.13

Description The issue is related to insufficient input validation in the Intel Unite Client software, which may allow an unauthenticated user to cause a denial of service via network access. This could potentially be exploited by a remote attacker to disrupt service.

Recommendations For versions prior to 3.3.176.13, update to version 3.3.176.13 or later to resolve the issue. As a temporary workaround, consider restricting network access to the Intel Unite Client until a patch is applied.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2019-02133

CVE-2019-0132

Produtos afetados

Intel Unite Client

Referências · 7

• https://intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00228.html · Aviso do Fabricante
• http://securityfocus.com/bid/108388 · Nota
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00228.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-0132 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-02133 · Nota de Segurança
• https://support.lenovo.com/us/en/product_security/LEN-27709 · Nota
• https://osv.dev/vulnerability/CVE-2019-0132 · Aviso do Fabricante