Intel CSME, SPS, TXE, AMT and DAL Advisory - Lenovo Support US

🗓️ 04 Jun 2020 20:27:57Reported by LenovoType

Intel CSME, SPS, TXE, AMT and DAL potential security vulnerabilities, privilege escalation, denial of service, information disclosure. Update recommended for Lenovo products worldwide

Reporter	Title	Published	Views	Family All 251
ATTACKERKB	Ripple20 Treck TCP/IP Stack Vulnerabilities	21 Dec 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-11899	17 Jun 202000:00	–	attackerkb
Tenable Nessus	ArubaOS-Switch Ripple20 Multiple Vulnerabilities (ARUBA-PSA-2020-006)	30 Jun 202100:00	–	nessus
Tenable Nessus	Multiple Vulnerabilities in Treck IP Stack Affecting Cisco Products: June 2020 (cisco-sa-treck-ip-stack-JyBQ5GyC)	12 Aug 202000:00	–	nessus
Tenable Nessus	HP iLO 3 < 1.93 / HP iLO 4 < 2.75 / HP iLO Superdome 4 < 1.64 / HP iLO 5 < 2.18 / HP Moonshot/Edgeline iLO 5 < 2.30 Ripple20 Multiple vulnerabilities	24 Sep 202000:00	–	nessus
Tenable Nessus	Treck TCP/IP stack multiple vulnerabilities. (Ripple20)	22 Jun 202000:00	–	nessus
Tenable Nessus	Intel Converged Security Management Engine (CSME) Active Management Technology (AMT) Multiple Vulnerabilities (INTEL-SA-00295)	19 Jun 202000:00	–	nessus
BDU FSTEC	The vulnerability of the Intel Active Management Technology implementation arises from insufficient validation of input data, allowing an intruder to gain unauthorized access to protected information.	29 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel Active Management Technology and Standard Manageability implementations lies in the possibility of an operation exceeding the buffer boundaries in memory, allowing a malicious actor to trigger a service failure.	29 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Converged Security and Manageability Engine implementation lies in the writing beyond the buffer boundaries of memory, which allows attackers to enhance their privileges.	29 Sep 202000:00	–	bdu_fstec