PT-2019-2359 · Intel · Intel Celeron J Series+4

Publicado 2019-05-14 · Atualizado 2020-08-24 · CVE-2019-0120

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Intel(R) Pentium(R) Processor J Series (affected versions not specified) Intel(R) Pentium(R) Processor N Series (affected versions not specified) Intel(R) Celeron(R) J Series (affected versions not specified) Intel(R) Celeron(R) N Series (affected versions not specified) Intel(R) Atom(R) Processor A Series (affected versions not specified) Intel(R) Atom(R) Processor E3900 Series (affected versions not specified) Intel(R) Pentium(R) Processor Silver Series (affected versions not specified)

Description The issue is related to insufficient key protection in silicon reference firmware, which may allow a privileged user to potentially enable denial of service via local access. This can be exploited by an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-284

CWE-522

Identificadores relacionados

BDU:2019-02134

CVE-2019-0120

Produtos afetados

Intel Atom Processor A Series

Intel Atom Processor E3900 Series

Intel Celeron J Series

Intel Pentium Processor J Series

Intel Pentium Processor Silver Series

Referências · 6

• https://intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00223.html · Aviso do Fabricante
• http://securityfocus.com/bid/108485 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-0120 · Nota de Segurança
• https://support.f5.com/csp/article/K29002929 · Nota
• https://bdu.fstec.ru/vul/2019-02134 · Nota de Segurança
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00223.html · Nota