Buffer overflow

2019-03-1420:29:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.1%

JSON

Buffer overflow in HECI subsystem in Intel® CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel® TXE version before 3.1.60 or 4.0.10, or Intel® Server Platform Services before version 5.00.04.012 may allow an unauthenticated user to potentially execute arbitrary code via physical access.

CPENameOperatorVersion
converged_security_management_engine_firmwarege11.0
converged_security_management_engine_firmwarelt11.8.60
converged_security_management_engine_firmwarege11.10
converged_security_management_engine_firmwarelt11.11.60
converged_security_management_engine_firmwarege11.20
converged_security_management_engine_firmwarelt11.22.60
converged_security_management_engine_firmwarege12.0.0
converged_security_management_engine_firmwarelt12.0.20
server_platform_services_firmwarelt5.00.04.012
trusted_execution_engine_firmwarege3.0

Name	Operator	Version
converged_security_management_engine_firmware	ge	11.0
converged_security_management_engine_firmware	lt	11.8.60
converged_security_management_engine_firmware	ge	11.10
converged_security_management_engine_firmware	lt	11.11.60
converged_security_management_engine_firmware	ge	11.20
converged_security_management_engine_firmware	lt	11.22.60
converged_security_management_engine_firmware	ge	12.0.0
converged_security_management_engine_firmware	lt	12.0.20
server_platform_services_firmware	lt	5.00.04.012
trusted_execution_engine_firmware	ge	3.0