PT-2019-2531 · Intel · Intel Data Center Manager Sdk

Published 2019-02-12 · Updated 2021-07-21 · CVE-2019-0106

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Data Center Manager SDK versions prior to 5.0.2

Description The issue is related to errors in input data processing in the installation mechanism of the Intel Data Center Manager SDK. It may allow an attacker to escalate their privileges.

Recommendations For versions prior to 5.0.2, update to version 5.0.2 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-02375

CVE-2019-0106

Affected Products

Intel Data Center Manager Sdk

References · 8

• https://bdu.fstec.ru/vul/2019-02375 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-0106 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-0106?cpeVersion=2.2 · Security Note
• https://osv.dev/vulnerability/CVE-2019-0106 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00215.html · Vendor Advisory
• http://securityfocus.com/bid/107069 · Note
• https://cxsecurity.com/cveshow/CVE-2019-0106 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-19-050-01 · Note