Intel Platform Update — June 2019

Tuesday, 11 June 2019

Vulnerabilities: 26
Critical: 0
High: 0
Zero-days: 0
Public exploit: 0

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

All vulnerabilities 26

Unscored26 Show

Unscored
CVE-2018-12147 Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Intel® Trusted…
Unscored
CVE-2018-3702 Improper permissions in the installer for the ITE Tech* Consumer Infrared Driver for Windows 10 versions before 5.4.3.0 may allow an authenticated user to pote…
Unscored
CVE-2019-0128 Improper permissions in the installer for Intel(R) Chipset Device Software (INF Update Utility) before version 10.1.1.45 may allow an authenticated user to esc…
Unscored
CVE-2019-0130 Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an unauthenticated user to potenti…
EPSS 1.9%
Unscored
CVE-2019-0136 Insufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially enable d…
EPSS 4.1%
Unscored
CVE-2019-0157 Insufficient input validation in the Intel(R) SGX driver for Linux may allow an authenticated user to potentially enable a denial of service via local access.
Unscored
CVE-2019-0164 Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to poten…
Unscored
CVE-2019-0174 Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information disclosure via local acc…
Unscored
CVE-2019-0175 Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via loca…
Unscored
CVE-2019-0177 Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via loca…
Unscored
CVE-2019-0178 Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via loca…
Unscored
CVE-2019-0179 Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via loca…
Unscored
CVE-2019-0180 Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via loca…
Unscored
CVE-2019-0181 Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via loca…
Unscored
CVE-2019-0182 Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via loca…
Unscored
CVE-2019-0183 Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via loca…
Unscored
CVE-2019-11092 Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via loca…
Unscored
CVE-2019-11117 Improper permissions in the installer for Intel(R) Omni-Path Fabric Manager GUI before version 10.9.2.1.1 may allow an authenticated user to potentially enable…
Unscored
CVE-2019-11119 Insufficient session validation in the service API for Intel(R) RWC3 version 4.186 and before may allow an unauthenticated user to potentially enable escalatio…
EPSS 2%
Unscored
CVE-2019-11123 Insufficient session validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of se…
Unscored
CVE-2019-11124 Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service an…
Unscored
CVE-2019-11125 Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of serv…
Unscored
CVE-2019-11126 Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or …
Unscored
CVE-2019-11127 Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or inf…
Unscored
CVE-2019-11128 Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of serv…
Unscored
CVE-2019-11129 Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service an…