2020.1 IPU – Intel® CSME, SPS, TXE, AMT, ISM and DAL Advisory

🗓️ 18 Jun 2020 00:00:00Reported by Intel Security CenterType

Intel® advisory for CSME, SPS, TXE, AMT, ISM, and DAL potential vulnerabilities with firmware and software update

Reporter	Title	Published	Views	Family All 147
BDU FSTEC	The vulnerability of the Intel Active Management Technology implementation arises from insufficient validation of input data, allowing an intruder to gain unauthorized access to protected information.	29 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Active Management Technology implementation arises from insufficient validation of input data, allowing an intruder to gain unauthorized access to protected information.	29 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel Active Management Technology and Standard Manageability implementations lies in the possibility of an operation exceeding the buffer boundaries in memory, allowing a malicious actor to trigger a service failure.	29 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Converged Security and Manageability Engine implementation lies in the writing beyond the buffer boundaries of memory, which allows attackers to enhance their privileges.	29 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Active Management Technology implementation arises from insufficient validation of input data. This allows attackers to disclose protected information or cause service failures.	29 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel Trusted Execution Engine’s microprogramming software, related to insecure privilege management, allows attackers to escalate their privileges.	29 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Converged Security and Manageability Engine implementation lies in the insufficient calculation of the password hash. This allows attackers to escalate their privileges, disclose sensitive information, or cause service failures.	29 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Converged Security and Manageability Engine implementation arises from insufficient validation of input data, allowing a perpetrator to trigger a service failure.	29 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Active Management Technology implementation arises from insufficient validation of input data, allowing a perpetrator to trigger a service failure.	29 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Intel Active Management Technology and Standard Manageability implementations stem from insufficient validation of input data. This allows attackers to gain unauthorized access to protected information.	29 Sep 202000:00	–	bdu_fstec

09 Jun 2020 00:00Current

9High risk

Vulners AI Score9

CVSS 27.5

CVSS 3.19.8

EPSS0.03536