HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2019-0130

CVSS 7.4v3.1pub. 2019-06-13upd. 2024-11-21

Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H

  • Intel Rapid Storage Technology Enterprise

    APP
    Intel
    < 5.5.0.2015

  • Lenovo Thinkstation P520

    HW
    Lenovo
    all versions

  • Lenovo Thinkstation P520c

    HW
    Lenovo
    all versions

  • Lenovo Thinkstation P520c Firmware

    OS
    Lenovo
    all versions

  • Lenovo Thinkstation P520 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Thinkstation P720

    HW
    Lenovo
    all versions

  • Lenovo Thinkstation P720 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Thinkstation P920

    HW
    Lenovo
    all versions

  • Lenovo Thinkstation P920 Firmware

    OS
    Lenovo
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
XSSDoS
CWE
References

Related vulnerabilities

CVE-2019-0135HIGH7.8same product

Improper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version...

CVE-2022-48188MEDIUM6.7same product

A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation model...

CVE-2021-3956MEDIUM4.3same product

A read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of Lenovo XClar...

CVE-2021-4210MEDIUM6.7same product

A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkSt...

CVE-2019-6190MEDIUM5.0same product

Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Len...