← Vulnerability feed

Vulnerability record · CVE-2019-0099 · published 17 May 2019

CVE-2019-0099: Intel server platform services firmware vulnerability

Intel · Server Platform Services Firmware

Insufficient access control vulnerability in subsystem in Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

6.8 CVSS 3.0 Medium EPSS 0.40% · top 68.2%
6.8CVSS 3.0 base score, v2 4.6
0.40%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

Insufficient access control vulnerability in subsystem in Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://support.f5.com/csp/article/K30105730
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html Vendor Advisory
https://support.f5.com/csp/article/K30105730
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html Vendor Advisory

Track CVE-2019-0099 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.2CVE-2018-3643Intel converged security management engine firmware vulnerabilityA vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) before ver…EPSS 0.48%7.8CVE-2017-5706Intel server platform services firmware memory buffer overflow vulnerabilityMultiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to the system to execute arbitrar…EPSS 0.69%7.8CVE-2017-5709Intel server platform services firmware vulnerabilityMultiple privilege escalations in kernel in Intel Server Platform Services Firmware 4.0 allows unauthorized process to access privileged content via …EPSS 0.58%7.6CVE-2018-12191Intel converged security management engine firmware memory buffer overflow vulnerabilityBounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before ver…EPSS 0.48%7.6CVE-2018-12208Intel converged security management engine firmware memory buffer overflow vulnerabilityBuffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4…EPSS 0.51%7.3CVE-2018-3655Intel converged security management engine firmware vulnerabilityA vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution E…EPSS 0.46%6.8CVE-2018-12192Intel converged security management engine firmware improper authentication vulnerabilityLogic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versio…EPSS 0.47%6.7CVE-2018-12147Intel converged security management engine firmware improper input validation vulnerabilityInsufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Inte…EPSS 0.46%

Source: NIST National Vulnerability Database (record CVE-2019-0099), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.