Improper access control

2023-08-1103:15:00

PRIOn knowledge base

www.prio-n.com

intel

csme

access control

software installer

privilege escalation

0.0004 Low

EPSS

Percentile

9.1%

JSON

Improper access control in the Intel® CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

CPENameOperatorVersion
converged_security_management_engine_firmwarelt11.12.94
converged_security_management_engine_firmwarelt11.8.94
converged_security_management_engine_firmwarelt12.0.93
converged_security_management_engine_firmwarelt14.1.70
converged_security_management_engine_firmwarege14.5.0
converged_security_management_engine_firmwarelt14.5.50
converged_security_management_engine_firmwarelt15.0.45
converged_security_management_engine_firmwarelt16.1.27
converged_security_management_engine_firmwarelt13.50.25
converged_security_management_engine_firmwarelt13.30.35

Name	Operator	Version
converged_security_management_engine_firmware	lt	11.12.94
converged_security_management_engine_firmware	lt	11.8.94
converged_security_management_engine_firmware	lt	12.0.93
converged_security_management_engine_firmware	lt	14.1.70
converged_security_management_engine_firmware	ge	14.5.0
converged_security_management_engine_firmware	lt	14.5.50
converged_security_management_engine_firmware	lt	15.0.45
converged_security_management_engine_firmware	lt	16.1.27
converged_security_management_engine_firmware	lt	13.50.25
converged_security_management_engine_firmware	lt	13.30.35