CVE-2019-0120 : Insufficient key protection vulnerability in silicon reference firmware for Inte

Insufficient key protection vulnerability in silicon reference firmware for Intel(R) Pentium(R) Processor J Series, Intel(R) Pentium(R) Processor N Series, Intel(R) Celeron(R) J Series, Intel(R) Celeron(R) N Series, Intel(R) Atom(R) Processor A Series, Intel(R) Atom(R) Processor E3900 Series, Intel(R) Pentium(R) Processor Silver Series may allow a privileged user to potentially enable denial of service via local access.

Published 2019-05-17 16:29:02

Updated 2020-08-24 17:37:01

Source Intel Corporation

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2019-0120

Intel » J5005 Firmware » Version: N/A
cpe:2.3:o:intel:j5005_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » J5005 » Version: N/A
Intel » J4205 Firmware » Version: N/A
cpe:2.3:o:intel:j4205_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » J4205 » Version: N/A
Intel » J3710 Firmware » Version: N/A
cpe:2.3:o:intel:j3710_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » J3710 » Version: N/A
Intel » N3540 Firmware » Version: N/A
cpe:2.3:o:intel:n3540_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » N3540 » Version: N/A
Intel » N3530 Firmware » Version: N/A
cpe:2.3:o:intel:n3530_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » N3530 » Version: N/A
Intel » N5000 Firmware » Version: N/A
cpe:2.3:o:intel:n5000_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » N5000 » Version: N/A
Intel » Celeron J4005 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_j4005_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron J4005 » Version: N/A
Intel » Celeron N4100 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_n4100_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron N4100 » Version: N/A
Intel » Celeron N4000 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_n4000_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron N4000 » Version: N/A
Intel » Celeron J4105 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_j4105_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron J4105 » Version: N/A
Intel » Celeron J3355 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_j3355_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron J3355 » Version: N/A
Intel » Celeron N3350 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_n3350_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron N3350 » Version: N/A
Intel » Celeron J3455 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_j3455_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron J3455 » Version: N/A
Intel » Celeron N3450 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_n3450_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron N3450 » Version: N/A
Intel » Celeron J3060 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_j3060_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron J3060 » Version: N/A
Intel » Celeron J3160 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_j3160_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron J3160 » Version: N/A
Intel » Celeron N3000 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_n3000_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron N3000 » Version: N/A
Intel » Celeron N2940 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_n2940_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron N2940 » Version: N/A
Intel » Celeron N2840 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_n2840_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron N2840 » Version: N/A
Intel » Celeron N2930 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_n2930_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron N2930 » Version: N/A
Intel » Celeron N2830 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_n2830_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron N2830 » Version: N/A
Intel » Atom 330 Firmware » Version: N/A
cpe:2.3:o:intel:atom_330_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Atom 330 » Version: N/A
Intel » Atom 230 Firmware » Version: N/A
cpe:2.3:o:intel:atom_230_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Atom 230 » Version: N/A
Intel » Atom X5-e3930 Firmware » Version: N/A
cpe:2.3:o:intel:atom_x5-e3930_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Atom X5-e3930 » Version: N/A
Intel » Atom X5-e3940 Firmware » Version: N/A
cpe:2.3:o:intel:atom_x5-e3940_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Atom X5-e3940 » Version: N/A
Intel » Atom X7-e3950 Firmware » Version: N/A
cpe:2.3:o:intel:atom_x7-e3950_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Atom X7-e3950 » Version: N/A
Intel » Pentium Silver J5005 Firmware » Version: N/A
cpe:2.3:o:intel:pentium_silver_j5005_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Pentium Silver J5005 » Version: N/A
Intel » Pentium Silver N5000 Firmware » Version: N/A
cpe:2.3:o:intel:pentium_silver_n5000_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Pentium Silver N5000 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2019-0120

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 26 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-0120

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:N/I:N/A:P	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
4.4	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H	0.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2019-0120

CWE-522 Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2019-0120

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00223.html

INTEL-SA-00223
Vendor Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/108485

Intel Unified Extensible Firmware Interface Multiple Security Vulnerabilities

CVEs referencing this url
https://support.f5.com/csp/article/K29002929

Jump to

Vulnerability Details : CVE-2019-0120

Products affected by CVE-2019-0120

Exploit prediction scoring system (EPSS) score for CVE-2019-0120

CVSS scores for CVE-2019-0120

CWE ids for CVE-2019-0120

References for CVE-2019-0120