Intel CSME, Server Platform Services, Trusted Execution Engine, Intel Active Management Technology and Dynamic Application Loader Vulnerabilities - Lenovo Support US

🗓️ 04 Nov 2019 16:25:26Reported by LenovoType

Potential vulnerabilities in Intel CSME, Server Platform Services, Trusted Execution Engine, Intel Active Management Technology and Dynamic Application Loader. Privilege escalation, denial of service, and information disclosure. Update firmware and software for protection

Reporter	Title	Published	Views	Family All 270
BDU FSTEC	The vulnerability of Intel Converged Security and Manageability Engine (CSME) software, which stems from insufficient validation of input data, allows attackers to trigger a service failure.	25 Nov 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel Active Management Technology’s microprogramming software, related to insufficient validation of input data, allows attackers to disclose protected information.	25 Nov 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microprogramming Software, Intel Converged Security and Manageability Engine (CSME), and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data, allowing attackers to disclose protected information.	25 Nov 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microprogramming Software: Intel Converged Security and Manageability Engine (CSME) and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data. This allows attackers to disclose sensitive information, escalate their privileges, or cause service interruptions.	25 Nov 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microprogramming Software, Intel Converged Security and Manageability Engine (CSME), and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data, allowing attackers to disclose protected information.	25 Nov 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel Active Management Technology’s microprogramming software, related to insufficient validation of input data, allows attackers to disclose protected information.	25 Nov 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microprogramming Software: Intel Converged Security and Manageability Engine (CSME), Intel Trusted Execution Engine (TXE), and Intel Dynamic Application Loader (DAL) arises from insufficient session verification, allowing attackers to exploit their privileges.	25 Nov 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel Active Management Technology’s microprogramming software lies in insufficient validation of input data, allowing attackers to exploit this to gain unauthorized privileges.	25 Nov 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel Server Platform Services’ microprogramming software, related to a logical error, allows attackers to trigger a service failure.	25 Nov 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microprogramming Software: Intel Converged Security and Manageability Engine (CSME), Intel Trusted Execution Engine (TXE), and Intel Dynamic Application Loader (DAL) is related to authentication errors, allowing attackers to escalate their privileges.	25 Nov 201900:00	–	bdu_fstec

12 Jun 2020 20:07Current

2.6Low risk

Vulners AI Score2.6

EPSS0.02323