Input validation

2019-12-1822:15:00

PRIOn knowledge base

www.prio-n.com

4.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

Insufficient Input validation in the subsystem for Intel® CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a privileged user to potentially enable denial of service via local access.

CPENameOperatorVersion
converged_security_management_engine_firmwarege14.0.0
converged_security_management_engine_firmwarelt14.0.10
converged_security_management_engine_firmwarege12.0
converged_security_management_engine_firmwarelt12.0.45
converged_security_management_engine_firmwarege13.0
converged_security_management_engine_firmwarelt13.0.10

Name	Operator	Version
converged_security_management_engine_firmware	ge	14.0.0
converged_security_management_engine_firmware	lt	14.0.10
converged_security_management_engine_firmware	ge	12.0
converged_security_management_engine_firmware	lt	12.0.45
converged_security_management_engine_firmware	ge	13.0
converged_security_management_engine_firmware	lt	13.0.10