The vulnerability of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine (CSME) arises from improper initialization of resources, allowing attackers to disclose protected information.

🗓️ 02 Dec 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Flaw in Intel Converged Security and Manageability Engine management software enables disclosure.

Reporter	Title	Published	Views	Family All 8
CVE	CVE-2023-48361	14 Aug 202413:45	–	cve
Cvelist	CVE-2023-48361	14 Aug 202413:45	–	cvelist
EUVD	EUVD-2023-52416	3 Oct 202520:07	–	euvd
Hewlett-Packard	Intel 2024.3 IPU – Chipset Firmware Security Update	24 Oct 202400:00	–	hp
Intel	2024.3 IPU - Intel® Chipset Firmware Advisory	22 Aug 202400:00	–	intel
NVD	CVE-2023-48361	14 Aug 202414:15	–	nvd
Positive Technologies	PT-2024-8890 · Intel · Intel Csme	13 Aug 202400:00	–	ptsecurity
Vulnrichment	CVE-2023-48361	14 Aug 202413:45	–	vulnrichment

Vulners

Node

intel intel_500_seriesRange<15.0.49

OR

intel intel_c250_seriesRange<15.0.49

OR

intel intel_atom_x6000e_seriesRange<15.40.34

OR

intel intel_pentium_n_seriesRange<15.40.34

OR

intel intel_pentium_j_seriesRange<15.40.34

OR

intel intel_celeron_j_seriesRange<15.40.34

OR

intel intel_celeron_n_seriesRange<15.40.34

OR

intel intel_700_series_chipsetRange<16.1.32

OR

intel intel_600_series_chipsetRange<16.1.32

OR

intel intel_c420_chipsetRange<11.12.96

OR

intel intel_x299_chipsetRange<11.12.96

OR

intel intel_c620_seriesRange<11.22.96

OR

intel 8th_generation_intel_core_processorsRange<11.8.96

OR

intel intel_100_seriesRange<11.8.96

OR

intel intel_200_seriesRange<11.8.96

OR

intel intel_300_seriesRange<12.0.95

OR

intel 8th_generation_intel_core_processorsRange<12.0.95

OR

intel intel_pentium_gold_processor_series_(g54xxu)Range<12.0.95

OR

intel intel_celeron_processor_4000_seriesRange<12.0.95

OR

intel intel_400_seriesRange<14.1.74

OR

intel intel_600_series_chipsetRange<16.50.12

OR

intel intel_c240_seriesRange<12.0.95

OR

intel 10th_generation_intel_core_processor_familyRange<13.0.69

OR

intel intel_pentium_silver_seriesRange<13.50.29

OR

intel intel_celeron_n_seriesRange<13.50.29

OR

intel intel_atom_processor_x_e3900_seriesRange<3.1.96

OR

intel intel_pentium_processor_j4000Range<3.1.96

OR

intel intel_pentium_processor_n4000Range<3.1.96

OR

intel intel_celeron_processor_j3000Range<3.1.96

OR

intel intel_celeron_processor_n3000Range<3.1.96

OR

intel intel_pentium_processor_j5000Range<4.0.52

OR

intel intel_pentium_processor_n5000_seriesRange<4.0.52

OR

intel intel_celeron_processor_j4000Range<4.0.52

OR

intel intel_celeron_processor_n4000Range<4.0.52

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-48361
vuldb	www.vuldb.com/ru/
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00999.html
web	www.web.nvd.nist.gov/view/vuln/detail
security-center	www.security-center.intel.com/advisory.aspx

02 Dec 2024 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 21.7

CVSS 32.3

EPSS0.00172

Intel Converged Security Manageability Engine Resource initialization flaw Information disclosure Remote management software