CVE-2019-0120

Medium

Description

Insufficient key protection vulnerability in silicon reference firmware for Intel(R) Pentium(R) Processor J Series, Intel(R) Pentium(R) Processor N Series, Intel(R) Celeron(R) J Series, Intel(R) Celeron(R) N Series, Intel(R) Atom(R) Processor A Series, Intel(R) Atom(R) Processor E3900 Series, Intel(R) Pentium(R) Processor Silver Series may allow a privileged user to potentially enable denial of service via local access.

SeverityMedium
CVSS4.4
Exploit probability—
ProductIntel Celeron J4005 Firmware
PublishedMay 17, 2019
First seenMay 17, 2019

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
intel celeron_j4005_firmwareNo range specified—
intel j5005_firmwareNo range specified—
intel j4205_firmwareNo range specified—
intel j3710_firmwareNo range specified—
intel n3540_firmwareNo range specified—
intel n3530_firmwareNo range specified—
intel n5000_firmwareNo range specified—
intel celeron_n4100_firmwareNo range specified—
intel celeron_n4000_firmwareNo range specified—
intel celeron_j4105_firmwareNo range specified—
intel celeron_j3355_firmwareNo range specified—
intel celeron_n3350_firmwareNo range specified—
intel celeron_j3455_firmwareNo range specified—
intel celeron_n3450_firmwareNo range specified—
intel celeron_j3060_firmwareNo range specified—
intel celeron_j3160_firmwareNo range specified—
intel celeron_n3000_firmwareNo range specified—
intel celeron_n2940_firmwareNo range specified—
intel celeron_n2840_firmwareNo range specified—
intel celeron_n2930_firmwareNo range specified—
intel celeron_n2830_firmwareNo range specified—
intel atom_330_firmwareNo range specified—
intel atom_230_firmwareNo range specified—
intel atom_x5-e3930_firmwareNo range specified—
intel atom_x5-e3940_firmwareNo range specified—
intel atom_x7-e3950_firmwareNo range specified—
intel pentium_silver_j5005_firmwareNo range specified—
intel pentium_silver_n5000_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.