CVE-2019-0094

published 2019-05-17

CVE-2019-0094: Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated…

medium 4.3 CVSS 3.1

AV A AC L PR N UI N S U C N I N A L

Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable denial of service via adjacent network access.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
intel	active_management_technology_firmware	>= 11.11.0 < 11.11.65	11.11.65
intel	active_management_technology_firmware	>= 11.22.0 < 11.22.65	11.22.65
intel	active_management_technology_firmware	>= 11.8.0 < 11.8.65	11.8.65
intel	active_management_technology_firmware	>= 12.0 < 12.0.35	12.0.35

CWE-20