Design/Logic Flaw

2019-05-1716:29:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.0%

JSON

Logic bug vulnerability in subsystem for Intel® CSME before version 12.0.35, Intel® TXE before 3.1.65, 4.0.15 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

CPENameOperatorVersion
converged_security_management_engine_firmwarege11.0
converged_security_management_engine_firmwarelt11.8.65
converged_security_management_engine_firmwarege11.10
converged_security_management_engine_firmwarelt11.11.65
converged_security_management_engine_firmwarege11.20
converged_security_management_engine_firmwarelt11.22.65
converged_security_management_engine_firmwarege12.0
converged_security_management_engine_firmwarelt12.0.35
trusted_execution_engine_firmwarege3.0
trusted_execution_engine_firmwarelt3.1.65

Name	Operator	Version
converged_security_management_engine_firmware	ge	11.0
converged_security_management_engine_firmware	lt	11.8.65
converged_security_management_engine_firmware	ge	11.10
converged_security_management_engine_firmware	lt	11.11.65
converged_security_management_engine_firmware	ge	11.20
converged_security_management_engine_firmware	lt	11.22.65
converged_security_management_engine_firmware	ge	12.0
converged_security_management_engine_firmware	lt	12.0.35
trusted_execution_engine_firmware	ge	3.0
trusted_execution_engine_firmware	lt	3.1.65