Intel® CSME, Intel® SPS, Intel® TXE, Intel® DAL, and Intel® AMT 2019.1 QSR Advisory

🗓️ 14 Apr 2020 00:00:00Reported by Intel Security CenterType

intel

intel🔗 www.intel.com👁 40 Views

Intel Security Advisory 2019.1 QS

Reporter	Title	Published	Views	Family All 142
BDU FSTEC	Vulnerability in the Intel Converged Security and Manageability Engine microprogramming subsystem, related to buffer overflow attacks, allows attackers to escalate their privileges.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	Vulnerability in the subsystems of Microprogramming Software: Intel Converged Security and Manageability Engine, Intel Server Platform Services, and Intel Trusted Execution Engine (TXE). This vulnerability is related to lack of access control, allowing attackers to enhance their privileges.	31 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Dynamic Application Loader subsystem of the Intel Converged Security and Manageability Engine allows a perpetrator to enhance their privileges.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Dynamic Application Loader component of the Intel Converged Security and Manageability Engine and the Intel Trusted Execution Engine allows attackers to enhance their privileges.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Converged Security and Manageability Engine and the Intel Trusted Execution Engine, related to improper code generation management, allows attackers to enhance their privileges.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogramming software in Intel Active Management Technology arises due to insufficient testing of input data, allowing attackers to exploit their privileges.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the HECI subsystem of the microprogramming software Intel Converged Security and Manageability Engine and Intel Server Platform Services allows attackers to disclose protected information.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Active Management Technology implementation arises from insufficient validation of input data, allowing attackers to escalate their privileges.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Active Management Technology implementation, related to writing beyond the memory buffer boundaries, allows a intruder to increase their privileges.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Active Management Technology implementation, which arises due to insufficient validation of input data, allows a intruder to trigger a service failure.	6 Jun 201900:00	–	bdu_fstec

14 May 2019 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 27.5

CVSS 39.8

CVSS 3.18

EPSS0.01864

intel csme sps txe dal amt vulnerabilities privilege escalation information disclosure denial of service cve-2019-0089 cve-2019-0090 cve-2019-0086 cve-2019-0091 cve-2019-0092 cve-2019-0093 cve-2019-0094