HPSBHF03607 rev. 3 - Intel CSME, Trusted Execution Engine (TXE), Active Management Technology (AMT) Security Updates

🗓️ 12 Mar 2019 00:00:00Reported by HP Product Security Response TeamType

hp🔗 support.hp.com👁 47 Views

Intel CSME, TXE, AMT Security Updates, Privilege Escalation, Denial of Service, Information Disclosur

Reporter	Title	Published	Views	Family All 111
BDU FSTEC	The vulnerabilities of Intel Converged Security and Manageability Engine and Intel Trusted Execution Engine involve insufficient input data validation, allowing attackers to gain access to protected information.	27 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Intel Converged Security and Manageability Engine and Intel Trusted Execution Engine involve insufficient input data validation, allowing attackers to execute arbitrary code.	27 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogramming software such as Intel Converged Security and Manageability Engine, Intel Trusted Execution Engine, and Intel Server Platform Services arises from the execution of operations outside of the buffer in memory. This allows attackers to execute arbitrary code.	27 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microprogrammable Software-based Intel Converged Security and Manageability Engine and Intel Server Platform Services, related to authentication process flaws (logical errors), allows attackers to bypass the MEBx authentication process.	27 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel Converged Security and Manageability Engine and Intel Trusted Execution Engine relates to the execution of operations outside of the buffer in memory, allowing an attacker to execute arbitrary code.	27 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the HECI subsystem of the microprogramming software for Intel Server Platform Services allows a perpetrator to cause a service failure.	27 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the HECI subsystem of the microprogramming software, Intel Converged Security and Manageability Engine, Intel Trusted Execution Engine, and Intel Server Platform Services allows a perpetrator to execute arbitrary code.	27 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Intel Converged Security and Manageability Engine and Trusted Execution Engine implementations allow attackers to gain access to protected information due to insufficient validation of input data.	29 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Capability Licensing Service, related to lack of access control, allows a violator to increase their privileges.	29 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Active Management Technology remote access implementation lies in insufficient validation of input data, allowing a perpetrator to trigger a service failure.	29 Mar 201900:00	–	bdu_fstec

25 Oct 2019 00:00Current

1.8Low risk

Vulners AI Score1.8

EPSS0.01113

intel csme trusted execution engine active management technology security updates privilege escalation denial of service information disclosure hp hp product security vulnerabilities softpaqs.