Design/Logic Flaw

2019-05-1716:29:00

PRIOn knowledge base

www.prio-n.com

4.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.6%

JSON

Insufficient data sanitization vulnerability in HECI subsystem for Intel® CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel® SPS before version SPS_E3_05.00.04.027.0 may allow a privileged user to potentially enable information disclosure via local access.

CPENameOperatorVersion
converged_security_and_management_enginege11.8.0
converged_security_and_management_enginelt11.8.65
converged_security_and_management_enginege11.11.0
converged_security_and_management_enginelt11.11.65
converged_security_and_management_enginege11.22.0
converged_security_and_management_enginelt11.22.65
converged_security_and_management_enginege12.0
converged_security_and_management_enginelt12.0.35

Name	Operator	Version
converged_security_and_management_engine	ge	11.8.0
converged_security_and_management_engine	lt	11.8.65
converged_security_and_management_engine	ge	11.11.0
converged_security_and_management_engine	lt	11.11.65
converged_security_and_management_engine	ge	11.22.0
converged_security_and_management_engine	lt	11.22.65
converged_security_and_management_engine	ge	12.0
converged_security_and_management_engine	lt	12.0.35