What is the CVSS score of CVE-2019-0174?

CVE-2019-0174 has a CVSS 3.0 base score of 3.3 (Low). CVSS vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.4%.

I9 9900X Firmware CVE-2019-0174

LOW

2019-06-13 secure@intel.com

Information Disclosure I9 9900X Firmware I9 9920X Firmware I9 9960X Firmware I9 9980Xe Firmware I9 9940X Firmware I9 7960X Firmware I9 7980Xe Firmware I9 7940X Firmware I9 7920X Firmware I9 7900X Firmware I7 7820X Firmware I7 7800X Firmware I5 4422E Firmware I5 4410E Firmware I5 4402Ec Firmware I5 4402E Firmware I5 4400E Firmware I5 4460T Firmware I5 4460S Firmware I5 4460 Firmware I5 4440S Firmware I5 4440 Firmware I5 4430S Firmware I5 4300M Firmware I5 4300U Firmware I5 4300Y Firmware I5 4302Y Firmware I5 4308U Firmware I5 4310M Firmware I5 4310U Firmware I5 4330M Firmware I5 4340M Firmware I5 4350U Firmware I5 4360U Firmware I5 4200H Firmware I5 4200M Firmware I5 4200U Firmware I5 4200Y Firmware I5 4202Y Firmware I5 4210H Firmware I5 4210M Firmware I5 4210U Firmware I5 4210Y Firmware I5 4220Y Firmware I5 4250U Firmware I5 4258U Firmware I5 4260U Firmware I5 4278U Firmware I5 4288U Firmware I3 4330 Firmware I3 4330T Firmware I3 4330Te Firmware I3 4340 Firmware I3 4340Te Firmware I3 4350 Firmware I3 4350T Firmware I3 4360 Firmware I3 4360T Firmware I3 4370 Firmware I3 4370T Firmware I3 4100E Firmware I3 4100M Firmware I3 4100U Firmware I3 4102E Firmware I3 4110E Firmware I3 4110M Firmware I3 4112E Firmware I3 4120U Firmware I3 4158U Firmware I3 4170T Firmware I3 4170 Firmware I3 4160T Firmware I3 4160 Firmware I3 4150T Firmware I3 4150 Firmware I3 4130T Firmware I3 4130 Firmware I3 4000M Firmware I3 4005U Firmware I3 4010U Firmware I3 4010Y Firmware I3 4012Y Firmware I3 4020Y Firmware I3 4025U Firmware I3 4030U Firmware I3 4030Y Firmware 3550M Firmware 3556U Firmware 3558U Firmware 3560M Firmware 3560Y Firmware 3561Y Firmware 3805U Firmware 3825U Firmware 2981U Firmware 2980U Firmware 2970M Firmware 2961Y Firmware 2957U Firmware 2955U Firmware 2950M Firmware 2002E Firmware 2000E Firmware E7 8893 Firmware E7 8891 Firmware E7 8890 Firmware E7 8880L Firmware E7 8880 Firmware E7 8870 Firmware E7 8867 Firmware E7 8860 Firmware E7 4850 Firmware E7 4830 Firmware E7 4820 Firmware E7 4809 Firmware E5 2699 Firmware E5 4669 Firmware E5 2438L Firmware E5 1428L Firmware E5 4667 Firmware E5 2428L Firmware E5 1620 Firmware E5 4660 Firmware E5 2418L Firmware E5 1630 Firmware E5 2698 Firmware E5 4655 Firmware E5 2408L Firmware E5 2697 Firmware E5 1650 Firmware E5 4650 Firmware E5 1660 Firmware E5 4648 Firmware E5 1680 Firmware E5 2695 Firmware E5 4640 Firmware E5 2690 Firmware E5 4627 Firmware E5 2687W Firmware E5 4620 Firmware E5 4610 Firmware E5 2683 Firmware E5 2680 Firmware E5 2670 Firmware E5 2667 Firmware E5 2660 Firmware E5 2658A Firmware E5 2658 Firmware E5 2650L Firmware E5 2650 Firmware E5 2648L Firmware E5 2643 Firmware E5 2640 Firmware E5 2637 Firmware E5 2630L Firmware E5 2630 Firmware E5 2628L Firmware E5 2623 Firmware E5 2620 Firmware E5 2618L Firmware E5 2609 Firmware E5 2608L Firmware E5 2603 Firmware E3 1286L Firmware E3 1286 Firmware E3 1285L Firmware E3 1285 Firmware E3 1281 Firmware E3 1280 Firmware E3 1276 Firmware E3 1275L Firmware E3 1270 Firmware E3 1268L Firmware E3 1271 Firmware E3 1275 Firmware E3 1265L Firmware E3 1246 Firmware E3 1245 Firmware E3 1241 Firmware E3 1240L Firmware E3 1240 Firmware E3 1231 Firmware E3 1230L Firmware E3 1230 Firmware E3 1226 Firmware E3 1225 Firmware E3 1220L Firmware E3 1220 Firmware

3.3

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

3.3 LOW

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Jun 13, 2019 - 16:29 nvd

LOW 3.3

DescriptionNVD

Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information disclosure via local access.

AnalysisAI

Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information disclosure via local access. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information disclosure via local access. Affected products include: Intel I9-9900X Firmware, Intel I9-9920X Firmware, Intel I9-9960X Firmware, Intel I9-9980Xe Firmware, Intel I9-9940X Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.