{"cve":"CVE-2019-0152","nvd":{"published":"2019-11-14T20:15:11.493","modified":"2026-06-17T02:07:48.660","status":"Modified","description":"Insufficient memory protection in System Management Mode (SMM) and Intel(R) TXT for certain Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","score":6.7},"cwes":["CWE-119"],"references":["https://cert-portal.siemens.com/productcert/pdf/ssa-398519.pdf","https://support.f5.com/csp/article/K34425791?utm_source=f5support&amp%3Butm_medium=RSS","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03971en_us","https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00240.html","https://cert-portal.siemens.com/productcert/pdf/ssa-398519.pdf"],"products":["intel:xeon_bronze_3104_firmware","intel:xeon_bronze_3106_firmware","intel:xeon_bronze_3204_firmware","intel:xeon_d-2123it_firmware","intel:xeon_d-2141i_firmware","intel:xeon_d-2142it_firmware","intel:xeon_d-2143it_firmware","intel:xeon_d-2145nt_firmware","intel:xeon_d-2146nt_firmware","intel:xeon_d-2161i_firmware","intel:xeon_d-2163it_firmware","intel:xeon_d-2166nt_firmware","intel:xeon_d-2173it_firmware","intel:xeon_d-2177nt_firmware","intel:xeon_d-2183it_firmware","intel:xeon_d-2187nt_firmware","intel:xeon_gold_5115_firmware","intel:xeon_gold_5118_firmware","intel:xeon_gold_5120_firmware","intel:xeon_gold_5120t_firmware","intel:xeon_gold_5122_firmware","intel:xeon_gold_5215_firmware","intel:xeon_gold_5215l_firmware","intel:xeon_gold_5215m_firmware","intel:xeon_gold_5217_firmware","intel:xeon_gold_5218_firmware","intel:xeon_gold_5218b_firmware","intel:xeon_gold_5218n_firmware","intel:xeon_gold_5218t_firmware","intel:xeon_gold_5220_firmware","intel:xeon_gold_5220s_firmware","intel:xeon_gold_5220t_firmware","intel:xeon_gold_5222_firmware","intel:xeon_gold_6126_firmware","intel:xeon_gold_6126f_firmware","intel:xeon_gold_6126t_firmware","intel:xeon_gold_6128_firmware","intel:xeon_gold_6130_firmware","intel:xeon_gold_6130f_firmware","intel:xeon_gold_6130t_firmware","intel:xeon_gold_6132_firmware","intel:xeon_gold_6134_firmware","intel:xeon_gold_6136_firmware","intel:xeon_gold_6138_firmware","intel:xeon_gold_6138f_firmware","intel:xeon_gold_6138t_firmware","intel:xeon_gold_6140_firmware","intel:xeon_gold_6140m_firmware","intel:xeon_gold_6142f_firmware","intel:xeon_gold_6144_firmware"],"source":"nvd","synced_at":"2026-10-19T20:59:25.448946135+00:00"},"epss":{"cve":"CVE-2019-0152","score":0.00389,"percentile":0.33006,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}