HPSBHF03637 rev. 3 - Intel 2019.2 IPU CSME SPS TXE AMT Security Updates

🗓️ 09 Nov 2019 00:00:00Reported by HP Product Security Response TeamType

hp🔗 support.hp.com👁 57 Views

Intel 2019.2 IPU CSME SPS TXE AMT Security Updates - Privilege Escalation, DoS, Information Disclosur

Reporter	Title	Published	Views	Family All 269
BDU FSTEC	The vulnerability of Intel Converged Security and Manageability Engine (CSME) software, which stems from insufficient validation of input data, allows attackers to trigger a service failure.	25 Nov 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel Active Management Technology’s microprogramming software, related to insufficient validation of input data, allows attackers to disclose protected information.	25 Nov 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microprogramming Software, Intel Converged Security and Manageability Engine (CSME), and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data, allowing attackers to disclose protected information.	25 Nov 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microprogramming Software: Intel Converged Security and Manageability Engine (CSME) and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data. This allows attackers to disclose sensitive information, escalate their privileges, or cause service interruptions.	25 Nov 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microprogramming Software, Intel Converged Security and Manageability Engine (CSME), and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data, allowing attackers to disclose protected information.	25 Nov 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel Active Management Technology’s microprogramming software, related to insufficient validation of input data, allows attackers to disclose protected information.	25 Nov 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microprogramming Software: Intel Converged Security and Manageability Engine (CSME), Intel Trusted Execution Engine (TXE), and Intel Dynamic Application Loader (DAL) arises from insufficient session verification, allowing attackers to exploit their privileges.	25 Nov 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel Active Management Technology’s microprogramming software lies in insufficient validation of input data, allowing attackers to exploit this to gain unauthorized privileges.	25 Nov 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel Server Platform Services’ microprogramming software, related to a logical error, allows attackers to trigger a service failure.	25 Nov 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microprogramming Software: Intel Converged Security and Manageability Engine (CSME), Intel Trusted Execution Engine (TXE), and Intel Dynamic Application Loader (DAL) is related to authentication errors, allowing attackers to escalate their privileges.	25 Nov 201900:00	–	bdu_fstec

04 Mar 2020 00:00Current

1.5Low risk

Vulners AI Score1.5

EPSS0.02323

intel hp security updates privilege escalation dos information disclosure csme sps txe amt dal vulnerabilities resolution softpaqs