Intel CSME, Server Platform Services, Trusted Execution Engine and Intel Active Management Technology Vulnerabilities - US

🗓️ 14 Mar 2019 14:33:35Reported by LenovoType

Potential vulnerabilities in Intel CSME, Server Platform Services, Trusted Execution Engine, and Intel Active Management Technology may lead to privilege escalation, denial of service, and information disclosure. Upgrading to the recommended versions is advised

Reporter	Title	Published	Views	Family All 102
BDU FSTEC	The vulnerabilities of Intel Converged Security and Manageability Engine and Intel Trusted Execution Engine involve insufficient input data validation, allowing attackers to gain access to protected information.	27 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Intel Converged Security and Manageability Engine and Intel Trusted Execution Engine involve insufficient input data validation, allowing attackers to execute arbitrary code.	27 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogramming software such as Intel Converged Security and Manageability Engine, Intel Trusted Execution Engine, and Intel Server Platform Services arises from the execution of operations outside of the buffer in memory. This allows attackers to execute arbitrary code.	27 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microprogrammable Software-based Intel Converged Security and Manageability Engine and Intel Server Platform Services, related to authentication process flaws (logical errors), allows attackers to bypass the MEBx authentication process.	27 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel Converged Security and Manageability Engine and Intel Trusted Execution Engine relates to the execution of operations outside of the buffer in memory, allowing an attacker to execute arbitrary code.	27 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the HECI subsystem of the microprogramming software for Intel Server Platform Services allows a perpetrator to cause a service failure.	27 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Intel Converged Security and Manageability Engine and Trusted Execution Engine implementations allow attackers to gain access to protected information due to insufficient validation of input data.	29 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Capability Licensing Service, related to lack of access control, allows a violator to increase their privileges.	29 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Active Management Technology remote access implementation lies in insufficient validation of input data, allowing a perpetrator to trigger a service failure.	29 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Converged Security and Manageability Engine implementation lies in insufficient validation of input data, allowing a perpetrator to execute arbitrary code.	29 Mar 201900:00	–	bdu_fstec

15 May 2019 15:29Current

4.2Medium risk

Vulners AI Score4.2

EPSS0.01113