Intel CSME / Converged Security and Management Engine (mask ROM): A flaw in the CSME boot ROM window before memory

CVSS 7.1CVE-2019-0090Firmware, BMC & network fabricIntel x86 Root of Trust: loss of trustcurated

Impact

A flaw in the CSME boot ROM window before memory protections engage allows code execution in the engine that is the hardware root of trust for the whole platform - it is what verifies BIOS under Boot Guard, backs Intel PTT/fTPM, and holds the chipset key from which platform-unique keys derive. Researchers demonstrated extraction of that chipset key, which forges the identity of the platform itself: EPID-based attestation, DRM, and any measurement chain rooted in CSME become untrustworthy, and the compromise is not visible from the OS at all.

Who can reach it

Local or physical access to the machine during the early boot window. On bare-metal GPU rental, a tenant with root plus a reboot is the realistic actor; on a colo floor, so is anyone with hands.

What to do

Cannot be fully fixed. The vulnerable code is in mask ROM, so no firmware update replaces it - Intel's CSME updates only narrow the exploitation window. The durable answer is hardware generations that are not affected, and until then treating CSME-rooted attestation as advisory rather than authoritative. If you sell attestation guarantees, do not root them here; root them in a discrete device you control.

References

https://nvd.nist.gov/vuln/detail/CVE-2019-0090 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.