PT-2019-2463 · Intel · Intel(R) Rst

Published 2019-06-11 · Updated 2023-03-02 · CVE-2019-0130

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) RSTe versions prior to 5.5.0.2015

Description The issue is related to a Reflected XSS in the web interface for Intel(R) Accelerated Storage Manager. This may allow an unauthenticated user to potentially enable denial of service via network access. The vulnerability exists due to inadequate protection of the web page structure, which can be exploited by a remote attacker to cause a denial of service.

Recommendations For versions prior to 5.5.0.2015, update to version 5.5.0.2015 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2019-02241

CVE-2019-0130

Affected Products

Intel(R) Rst

References · 6

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00226.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0130 · Security Note
• https://osv.dev/vulnerability/CVE-2019-0130 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02241 · Security Note
• http://securityfocus.com/bid/108775 · Note
• https://support.lenovo.com/us/en/product_security/LEN-27843 · Note