PT-2019-4065 · Intel · Intel Xeon E-2100+4

Published 2019-11-12 · Updated 2022-11-21 · CVE-2019-0185

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) Core(TM) Processor families versions 6th through 9th Intel(R) Xeon(R) Processor E3-1500 versions v5 and v6 Intel(R) Xeon(R) E-2100 and E-2200 Processor families with Intel(R) Processor Graphics

Description The issue is related to insufficient access control in the protected memory subsystem for System Management Mode (SMM) in certain Intel processor families. This may allow a privileged user to potentially enable information disclosure via local access. The vulnerability in the System Management Mode (SMM) component of Intel processor microcode is associated with inadequate access control, which can be exploited to disclose protected information.

Recommendations For 6th through 9th Generation Intel(R) Core(TM) Processor families: update to a version that includes the fix for the insufficient access control issue. For Intel(R) Xeon(R) Processor E3-1500 versions v5 and v6: apply the recommended configuration changes to mitigate the risk of information disclosure. For Intel(R) Xeon(R) E-2100 and E-2200 Processor families with Intel(R) Processor Graphics: restrict local access to minimize the risk of exploitation until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2019-04626

CVE-2019-0185

Affected Products

Intel Core Processor

Intel Xeon E-2100

Intel Xeon E-2200

Intel Xeon E3-1500

Intel Xeon Processors

References · 4

• https://bdu.fstec.ru/vul/2019-04626 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-0185 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00254.html · Vendor Advisory
• https://support.f5.com/csp/article/K51535953?utm_source=f5support&amp%3Butm_medium=RSS · Note