PT-2019-2358 · Intel · Intel Unite Client

Published 2019-05-14 · Updated 2022-04-27 · CVE-2019-0132

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel Unite Client versions prior to 3.3.176.13

Description The issue is related to insufficient input validation in the Intel Unite Client software, which may allow an unauthenticated user to cause a denial of service via network access. This could potentially be exploited by a remote attacker to disrupt service.

Recommendations For versions prior to 3.3.176.13, update to version 3.3.176.13 or later to resolve the issue. As a temporary workaround, consider restricting network access to the Intel Unite Client until a patch is applied.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-02133

CVE-2019-0132

Affected Products

Intel Unite Client

References · 7

• https://intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00228.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0132 · Security Note
• https://bdu.fstec.ru/vul/2019-02133 · Security Note
• https://osv.dev/vulnerability/CVE-2019-0132 · Vendor Advisory
• http://securityfocus.com/bid/108388 · Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00228.html · Note
• https://support.lenovo.com/us/en/product_security/LEN-27709 · Note