PT-2019-2359 · Intel · Intel Celeron J Series+4

Published 2019-05-14 · Updated 2020-08-24 · CVE-2019-0120

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Intel(R) Pentium(R) Processor J Series (affected versions not specified) Intel(R) Pentium(R) Processor N Series (affected versions not specified) Intel(R) Celeron(R) J Series (affected versions not specified) Intel(R) Celeron(R) N Series (affected versions not specified) Intel(R) Atom(R) Processor A Series (affected versions not specified) Intel(R) Atom(R) Processor E3900 Series (affected versions not specified) Intel(R) Pentium(R) Processor Silver Series (affected versions not specified)

Description The issue is related to insufficient key protection in silicon reference firmware, which may allow a privileged user to potentially enable denial of service via local access. This can be exploited by an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Insufficiently Protected Credentials

Weakness Enumeration

CWE-284

CWE-522

Related Identifiers

BDU:2019-02134

CVE-2019-0120

Affected Products

Intel Atom Processor A Series

Intel Atom Processor E3900 Series

Intel Celeron J Series

Intel Pentium Processor J Series

Intel Pentium Processor Silver Series

References · 6

• https://intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00223.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0120 · Security Note
• https://bdu.fstec.ru/vul/2019-02134 · Security Note
• http://securityfocus.com/bid/108485 · Note
• https://support.f5.com/csp/article/K29002929 · Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00223.html · Note