HPSBHF03616 rev. 4 - Intel 2019.1 CSME, Trusted Execution Engine (TXE), Active Management Technology (AMT) Security Updates

🗓️ 13 May 2019 00:00:00Reported by HP Product Security Response TeamType

HPSBHF03616 rev. 4 - Intel 2019.1 CSME, Trusted Execution Engine (TXE), Active Management Technology (AMT) Security Updates. Multiple potential security vulnerabilities identified with Intel CSME, Trusted Execution Engine and Intel Active Management Technology which may allow escalation of privilege, denial of service, information disclosure. HP identified affected platforms and target dates for Softpaqs

Reporter	Title	Published	Views	Family All 142
BDU FSTEC	Vulnerability in the Intel Converged Security and Manageability Engine microprogramming subsystem, related to buffer overflow attacks, allows attackers to escalate their privileges.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	Vulnerability in the subsystems of Microprogramming Software: Intel Converged Security and Manageability Engine, Intel Server Platform Services, and Intel Trusted Execution Engine (TXE). This vulnerability is related to lack of access control, allowing attackers to enhance their privileges.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Dynamic Application Loader subsystem of the Intel Converged Security and Manageability Engine allows a perpetrator to enhance their privileges.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Dynamic Application Loader component of the Intel Converged Security and Manageability Engine and the Intel Trusted Execution Engine allows attackers to enhance their privileges.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Converged Security and Manageability Engine and the Intel Trusted Execution Engine, related to improper code generation management, allows attackers to enhance their privileges.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogramming software in Intel Active Management Technology arises due to insufficient testing of input data, allowing attackers to exploit their privileges.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the HECI subsystem of the microprogramming software Intel Converged Security and Manageability Engine and Intel Server Platform Services allows attackers to disclose protected information.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Active Management Technology implementation arises from insufficient validation of input data, allowing attackers to escalate their privileges.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Active Management Technology implementation, related to writing beyond the memory buffer boundaries, allows a intruder to increase their privileges.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Active Management Technology implementation, which arises due to insufficient validation of input data, allows a intruder to trigger a service failure.	6 Jun 201900:00	–	bdu_fstec

30 Oct 2019 00:00Current

1.8Low risk

Vulners AI Score1.8

EPSS0.01864