A vulnerability in the Microprogramming Software Subsystem of the Intel Converged Security and Manageability Engine (CSME) exists, due to insufficient validation of input data. This allows attackers to trigger a service failure.

🗓️ 23 Oct 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Vulnerability in Intel security engine microprogramming causes service failure from bad input validation.

Reporter	Title	Published	Views	Family All 9
CVE	CVE-2023-34424	14 Aug 202413:45	–	cve
Cvelist	CVE-2023-34424	14 Aug 202413:45	–	cvelist
EUVD	EUVD-2023-38501	3 Oct 202520:07	–	euvd
Hewlett-Packard	Intel 2024.3 IPU – Chipset Firmware Security Update	24 Oct 202400:00	–	hp
Intel	2024.3 IPU - Intel® Chipset Firmware Advisory	22 Aug 202400:00	–	intel
NVD	CVE-2023-34424	14 Aug 202414:15	–	nvd
Positive Technologies	PT-2024-7105 · Intel · Intel Converged Security/Manageability Engine	13 Aug 202400:00	–	ptsecurity
RedhatCVE	CVE-2023-34424	23 May 202503:56	–	redhatcve
Vulnrichment	CVE-2023-34424	14 Aug 202413:45	–	vulnrichment

Vulners

Node

intel intel_500_seriesRange<15.0.49

OR

intel intel_c250_seriesRange<15.0.49

OR

intel intel_atom_x6000e_seriesRange<15.40.34

OR

intel intel_700_series_chipsetRange<16.1.32

OR

intel intel_600_series_chipsetRange<16.1.32

OR

intel intel_c620_seriesRange<11.22.96

OR

intel intel_c240_seriesRange<11.22.96

OR

intel intel_x299Range<11.22.96

OR

intel 8th_generation_intel_core_processorsRange<11.8.96

OR

intel intel_100_seriesRange<11.8.96

OR

intel intel_200_seriesRange<11.8.96

OR

intel intel_300_seriesRange<12.0.95

OR

intel intel_c420_seriesRange<12.0.95

OR

intel 8th_generation_intel_core_processorsRange<12.0.95

OR

intel intel_pentium_gold_processor_series_(g54xxu)Range<12.0.95

OR

intel intel_celeron_processor_4000_seriesRange<12.0.95

OR

intel intel_pentium_silver_processor_n_seriesRange<13.50.29

OR

intel intel_400_seriesRange<14.1.74

OR

intel intel_pentium_processor_n_seriesRange<15.40.34

OR

intel intel_pentium_processor_j_seriesRange<15.40.34

OR

intel intel_celeron_processor_n_seriesRange<15.40.34

OR

intel intel_celeron_processor_j_seriesRange<15.40.34

OR

intel intel_600_series_chipsetRange<16.50.12

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00999.html
web	www.web.nvd.nist.gov/view/vuln/detail
security-center	www.security-center.intel.com/advisory.aspx

23 Oct 2024 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 34.4

CVSS 24.6

EPSS0.00169

Intel security engine microprogramming vulnerability input validation service failure