Strix
26.1K

CVE-2019-14607

MEDIUMCVSS 5.3/10EPSS 0.34%

Last modified

CVE-2019-14607 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. Improper conditions check in multiple Intel® Processors may allow an authenticated user to potentially enable partial escalation of privilege, denial of service and/or information disclosure via local access.. EPSS estimates a 0.34% chance of exploitation in the next 30 days.

Description

Improper conditions check in multiple Intel® Processors may allow an authenticated user to potentially enable partial escalation of privilege, denial of service and/or information disclosure via local access.

Metrics

CVSS 3.1
5.3/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS Probability
0.34%

26.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
IntelXeon Platinum 9282 FirmwareAll versions
IntelXeon Platinum 9242 FirmwareAll versions
IntelXeon Platinum 9222 FirmwareAll versions
IntelXeon Platinum 9221 FirmwareAll versions
IntelXeon Platinum 8280m FirmwareAll versions
IntelXeon Platinum 8280l FirmwareAll versions
IntelXeon Platinum 8280 FirmwareAll versions
IntelXeon Platinum 8276m FirmwareAll versions
IntelXeon Platinum 8276l FirmwareAll versions
IntelXeon Platinum 8276 FirmwareAll versions
IntelXeon Platinum 8270 FirmwareAll versions
IntelXeon Platinum 8268 FirmwareAll versions
IntelXeon Platinum 8260y FirmwareAll versions
IntelXeon Platinum 8260m FirmwareAll versions
IntelXeon Platinum 8260l FirmwareAll versions
IntelXeon Platinum 8260 FirmwareAll versions
IntelXeon Platinum 8256 FirmwareAll versions
IntelXeon Platinum 8253 FirmwareAll versions
IntelXeon Gold 6262v FirmwareAll versions
IntelXeon Gold 6254 FirmwareAll versions
IntelXeon Gold 6252n FirmwareAll versions
IntelXeon Gold 6252 FirmwareAll versions
IntelXeon Gold 6248 FirmwareAll versions
IntelXeon Gold 6246 FirmwareAll versions
IntelXeon Gold 6244 FirmwareAll versions
IntelXeon Gold 6242 FirmwareAll versions
IntelXeon Gold 6240y FirmwareAll versions
IntelXeon Gold 6240m FirmwareAll versions
IntelXeon Gold 6240l FirmwareAll versions
IntelXeon Gold 6240 FirmwareAll versions
IntelXeon Gold 6238t FirmwareAll versions
IntelXeon Gold 6238m FirmwareAll versions
IntelXeon Gold 6238l FirmwareAll versions
IntelXeon Gold 6238 FirmwareAll versions
IntelXeon Gold 6234 FirmwareAll versions
IntelXeon Gold 6230t FirmwareAll versions
IntelXeon Gold 6230n FirmwareAll versions
IntelXeon Gold 6230 FirmwareAll versions
IntelXeon Gold 6226 FirmwareAll versions
IntelXeon Gold 6222v FirmwareAll versions
IntelXeon Gold 5222 FirmwareAll versions
IntelXeon Gold 5220t FirmwareAll versions
IntelXeon Gold 5220s FirmwareAll versions
IntelXeon Gold 5220 FirmwareAll versions
IntelXeon Gold 5218t FirmwareAll versions
IntelXeon Gold 5218n FirmwareAll versions
IntelXeon Gold 5218b FirmwareAll versions
IntelXeon Gold 5218 FirmwareAll versions
IntelXeon Gold 5217 FirmwareAll versions
IntelXeon Gold 5215m FirmwareAll versions

Showing 50 of 378 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2019-14607?
Improper conditions check in multiple Intel® Processors may allow an authenticated user to potentially enable partial escalation of privilege, denial of service and/or information disclosure via local access.
How severe is CVE-2019-14607?
CVE-2019-14607 has a CVSS score of 5.3/10 (MEDIUM severity). The EPSS model estimates a 0.34% probability of exploitation in the next 30 days.
How do I fix CVE-2019-14607?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-14607?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST