HPSBHF03592 rev. 3 - Intel Converged Security and Management Engine (CSME) and Power Management Controller (PMC) Security Updates

🗓️ 11 Sep 2018 00:00:00Reported by HP Product Security Response TeamType

Intel CSME and PMC Firmware Security Update

Reporter	Title	Published	Views	Family All 63
BDU FSTEC	The vulnerability of the implementation of Intel Active Management Technology for microprogramming software, Intel Converged Security and Manageability Engine, and Intel Management Engine, which allows a perpetrator to trigger a service failure.	5 Oct 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the implementation of Intel Active Management Technology (AMT) for microprogramming software such as Intel Converged Security and Manageability Engine and Intel Management Engine allows a perpetrator to execute arbitrary code with AMT privileges.	5 Oct 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability relates to the implementation of the TLS protocol by the Intel Active Management Technology (AMT) subsystem of the Intel Converged Security and Manageability Engine and the Intel Management Engine. This vulnerability allows a attacker to obtain the TLS session key.	5 Oct 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microprogramming Software, including Intel Converged Security and Manageability Engine (CSME), Intel Server Platform Services (SPS), and Intel Trusted Execution Engine (TXE), arises due to privilege management errors, allowing attackers to disclose or modify protected information.	5 Oct 201800:00	–	bdu_fstec
Circl	CVE-2018-3643	27 May 202201:28	–	circl
Circl	CVE-2018-3659	27 May 202201:28	–	circl
CNVD	Intel CSME AMT Buffer Overflow Vulnerability	16 Sep 201800:00	–	cnvd
CNVD	Unspecified Vulnerability in Intel Power Management Controller	16 Sep 201800:00	–	cnvd
CNVD	Unspecified Vulnerability in Intel Active Management Technology	16 Sep 201800:00	–	cnvd
CNVD	Intel CSME Resource Management Error Vulnerability	16 Sep 201800:00	–	cnvd