CVE-2019-0185 Information disclosure in 2019.2 IPU – Intel(R) Processor Graphics SMM
A privileged local attacker can exploit insufficient access control in Intel Processor Graphics SMM to disclose protected memory information.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-0185?
CVE-2019-0185 is a medium-severity vulnerability in 2019.2 IPU – Intel(R) Processor Graphics SMM, published on 14 Nov 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Insufficient access control in protected memory subsystem for SMM for 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor families; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 families; Intel(R) Xeon(R) E-2100 and E-2200 Processor families with Intel(R) Processor Graphics may allow a privileged user to potentially enable information disclosure via local access.
Which versions are affected by CVE-2019-0185?
It affects 142 products.
Products include Intel Core I5-7200u Firmware, Intel Core I5-7260u Firmware, Intel Core I5-7267u Firmware, Intel Core I5-7287u Firmware, Intel Core I5-7300hq Firmware, Intel Core I5-7300u Firmware and 136 more.
How do I fix CVE-2019-0185?
No fix has been published for CVE-2019-0185 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-0185 being exploited?
There is no known exploitation of CVE-2019-0185 in the wild and no public exploit code.
Other vulnerabilities in 2019.2 IPU – Intel(R) Processor Graphics SMM
Sources
Also known as GHSA-f3j9-4gh6-94r4.