Insufficiently protected credentials in Intel Unified Extensible Firmware Interface
Priority LOW 20CWE-522Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-522.
Summary
Insufficient key protection vulnerability in silicon reference firmware for Intel(R) Pentium(R) Processor J Series, Intel(R) Pentium(R) Processor N Series, Intel(R) Celeron(R) J Series, Intel(R) Celeron(R) N Series, Intel(R) Atom(R) Processor A Series, Intel(R) Atom(R) Processor E3900 Series, Intel(R) Pentium(R) Processor Silver Series may allow a privileged user to potentially enable denial of service via local access.
Why it matters now
EPSS 0.00354 29th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Intel(R) Unified Extensible Firmware Interface (UEFI) | Intel(R) Pentium(R) Processor J Series, Intel(R) Pentium(R) Processor N Series, Intel(R) Celeron(R) J Series, Intel(R) Celeron(R) N Series, Intel(R) Atom(R) Processor A Series, Intel(R) Atom(R) Processor E3900 Series, Intel(R) Pentium(R) Processor Silver Series. | — | No fix listed | CNA |
- Intel(R) Unified Extensible Firmware Interface (UEFI) Vendor— Affected Intel(R) Pentium(R) Processor J Series, Intel(R) Pentium(R) Processor N Series, Intel(R) Celeron(R) J Series, Intel(R) Celeron(R) N Series, Intel(R) Atom(R) Processor A Series, Intel(R) Atom(R) Processor E3900 Series, Intel(R) Pentium(R) Processor Silver Series. Fixed in — No fix listed CNA
CPE configurations NVD · 56
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:intel:j5005_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:j5005:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:j4205_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:j4205:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:j3710_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:j3710:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:n3540_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:n3540:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:n3530_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:n3530:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
- cpe:2.3:o:intel:j5005_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:j5005:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:j4205_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:j4205:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:j3710_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:j3710:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:n3540_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:n3540:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:n3530_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:n3530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
Show 46 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:intel:n5000_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:n5000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:celeron_j4005_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:celeron_j4005:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:celeron_n4100_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:celeron_n4100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:celeron_n4000_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:celeron_n4000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:celeron_j4105_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:celeron_j4105:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:celeron_j3355_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:celeron_j3355:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:celeron_n3350_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:celeron_n3350:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:celeron_j3455_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:celeron_j3455:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:celeron_n3450_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:celeron_n3450:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:celeron_j3060_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:celeron_j3060:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:celeron_j3160_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:celeron_j3160:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:celeron_n3000_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:celeron_n3000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:celeron_n2940_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:celeron_n2940:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:celeron_n2840_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:celeron_n2840:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:celeron_n2930_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:celeron_n2930:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:celeron_n2830_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:celeron_n2830:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:atom_330_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:atom_330:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:atom_230_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:atom_230:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:atom_x5-e3930_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:atom_x5-e3930:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:atom_x5-e3940_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:atom_x5-e3940:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:atom_x7-e3950_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:atom_x7-e3950:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:pentium_silver_j5005_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:pentium_silver_j5005:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:pentium_silver_n5000_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:pentium_silver_n5000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
- cpe:2.3:o:intel:n5000_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:n5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:celeron_j4005_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:celeron_j4005:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:celeron_n4100_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:celeron_n4100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:celeron_n4000_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:celeron_n4000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:celeron_j4105_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:celeron_j4105:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:celeron_j3355_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:celeron_j3355:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:celeron_n3350_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:celeron_n3350:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:celeron_j3455_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:celeron_j3455:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:celeron_n3450_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:celeron_n3450:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:celeron_j3060_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:celeron_j3060:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:celeron_j3160_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:celeron_j3160:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:celeron_n3000_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:celeron_n3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:celeron_n2940_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:celeron_n2940:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:celeron_n2840_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:celeron_n2840:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:celeron_n2930_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:celeron_n2930:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:celeron_n2830_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:celeron_n2830:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:atom_330_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:atom_330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:atom_230_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:atom_230:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:atom_x5-e3930_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:atom_x5-e3930:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:atom_x5-e3940_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:atom_x5-e3940:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:atom_x7-e3950_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:atom_x7-e3950:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:pentium_silver_j5005_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:pentium_silver_j5005:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:pentium_silver_n5000_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:pentium_silver_n5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-0120
- 2026-10-03 Alias added: GHSA-c89g-ghqx-95xg
References
More Intel Atom 230 Firmware vulnerabilities
- TI-2020-00576 Improper access control in the PMC for some Intel(R) Processors may allow a privileged… CVSS 3.1MEDIUM 6.7
Sources
- CVE-2019-0120 · CVE Program
- CVE-2019-0120 · NVD
- FIRST EPSS
- GHSA-c89g-ghqx-95xg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences