Authentication flaw

2019-12-1822:15:00

PRIOn knowledge base

www.prio-n.com

0.0004 Low

EPSS

Percentile

12.6%

JSON

Authentication bypass in the subsystem for Intel® CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel® TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access.

CPENameOperatorVersion
converged_security_management_engine_firmwarege14.0.0
converged_security_management_engine_firmwarelt14.0.10
converged_security_management_engine_firmwarege12.0
converged_security_management_engine_firmwarelt12.0.45
converged_security_management_engine_firmwarege11.20
converged_security_management_engine_firmwarelt11.22.70
converged_security_management_engine_firmwarege11.10
converged_security_management_engine_firmwarelt11.11.70
converged_security_management_engine_firmwarege11.0
converged_security_management_engine_firmwarelt11.8.70

Name	Operator	Version
converged_security_management_engine_firmware	ge	14.0.0
converged_security_management_engine_firmware	lt	14.0.10
converged_security_management_engine_firmware	ge	12.0
converged_security_management_engine_firmware	lt	12.0.45
converged_security_management_engine_firmware	ge	11.20
converged_security_management_engine_firmware	lt	11.22.70
converged_security_management_engine_firmware	ge	11.10
converged_security_management_engine_firmware	lt	11.11.70
converged_security_management_engine_firmware	ge	11.0
converged_security_management_engine_firmware	lt	11.8.70