What is the CVSS score of CVE-2019-0120?

CVE-2019-0120 has a CVSS 3.0 base score of 4.4 (Medium). CVSS vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.4%.

J5005 Firmware CVE-2019-0120

MEDIUM

Insufficiently Protected Credentials (CWE-522)

2019-05-17 secure@intel.com

Denial Of Service Intel J5005 Firmware J4205 Firmware J3710 Firmware N3540 Firmware N3530 Firmware N5000 Firmware Celeron J4005 Firmware Celeron N4100 Firmware Celeron N4000 Firmware Celeron J4105 Firmware Celeron J3355 Firmware Celeron N3350 Firmware Celeron J3455 Firmware Celeron N3450 Firmware Celeron J3060 Firmware Celeron J3160 Firmware Celeron N3000 Firmware Celeron N2940 Firmware Celeron N2840 Firmware Celeron N2930 Firmware Celeron N2830 Firmware Atom 330 Firmware Atom 230 Firmware Atom X5 E3930 Firmware Atom X5 E3940 Firmware Atom X7 E3950 Firmware Pentium Silver J5005 Firmware Pentium Silver N5000 Firmware

4.4

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

4.4 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

May 17, 2019 - 16:29 nvd

MEDIUM 4.4

DescriptionNVD

Insufficient key protection vulnerability in silicon reference firmware for Intel(R) Pentium(R) Processor J Series, Intel(R) Pentium(R) Processor N Series, Intel(R) Celeron(R) J Series, Intel(R) Celeron(R) N Series, Intel(R) Atom(R) Processor A Series, Intel(R) Atom(R) Processor E3900 Series, Intel(R) Pentium(R) Processor Silver Series may allow a privileged user to potentially enable denial of service via local access.

AnalysisAI

Insufficient key protection vulnerability in silicon reference firmware for Intel(R) Pentium(R) Processor J Series, Intel(R) Pentium(R) Processor N Series, Intel(R) Celeron(R) J Series, Intel(R). Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Insufficiently Protected Credentials (CWE-522), which allows attackers to obtain user credentials due to weak protection mechanisms. Insufficient key protection vulnerability in silicon reference firmware for Intel(R) Pentium(R) Processor J Series, Intel(R) Pentium(R) Processor N Series, Intel(R) Celeron(R) J Series, Intel(R) Celeron(R) N Series, Intel(R) Atom(R) Processor A Series, Intel(R) Atom(R) Processor E3900 Series, Intel(R) Pentium(R) Processor Silver Series may allow a privileged user to potentially enable denial of service via local access. Affected products include: Intel J5005 Firmware, Intel J4205 Firmware, Intel J3710 Firmware, Intel N3540 Firmware, Intel N3530 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Hash passwords with strong algorithms (bcrypt, argon2), encrypt credentials in transit and at rest, never log credentials.