Lucene search
+L

486 matches found

CVE
CVE
added 2020/11/12 6:5 p.m.110 views

CVE-2020-8753

CVE-2020-8753 is an out-of-bounds read vulnerability in the DHCP subsystem of Intel AMT/ISM (and related components in the Intel CSME/SPS/TXE/SO CSME stack). Affected versions are Intel AMT/ISM before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45. The flaw may allow an unauthenticated attacker...

7.5CVSS8AI score0.01496EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/11/12 6:5 p.m.135 views

CVE-2020-8752

CVE-2020-8752 affects Intel AMT/ISM IPv6 subsystem: out-of-bounds write in IPv6 can allow unauthenticated privilege escalation via network access on Intel AMT/ISM firmware versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45. Intel INTEL-SA-00391 describes mitigation; affected products i...

9.8CVSS9.5AI score0.01686EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/11/12 6:5 p.m.44 views

CVE-2020-8752

Out-of-bounds write in IPv6 subsystem for IntelR AMT, IntelR ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access...

9.7AI score0.01686EPSS
SaveExploits0References2
NVD
NVD
added 2020/11/11 6:15 p.m.29 views

CVE-2020-8353

Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration EHBC feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT...

6.7CVSS6.4AI score0.00554EPSS
SaveExploits1References1
Prion
Prion
added 2020/11/11 6:15 p.m.19 views

Design/Logic Flaw

Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration EHBC feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT...

4.6CVSS6.4AI score0.00554EPSS
SaveExploits1References1Affected Software14
Cvelist
Cvelist
added 2020/11/11 5:35 p.m.37 views

CVE-2020-8353

Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration EHBC feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT...

6.7CVSS6.4AI score0.00554EPSS
SaveExploits1References1
CVE
CVE
added 2020/11/11 5:35 p.m.64 views

CVE-2020-8353

CVE-2020-8353 applies to Lenovo Desktop/Workstation systems where the Embedded Host Based Configuration (EHBC) feature of Intel AMT could be enabled. The connected documents confirm EHBC-enabled AMT allows an administrative user with local access to configure AMT, indicating a local-attack surfac...

6.7CVSS6.3AI score0.00554EPSS
SaveExploits1References1Affected Software1
ThreatPost
ThreatPost
added 2020/11/10 8:59 p.m.109 views

Colossal Intel Update Anchored by Critical Privilege-Escalation Bugs

A massive Intel security update this month addresses flaws across a myriad of products – most notably, critical bugs that can be exploited by unauthenticated cybercriminals in order to gain escalated privileges. These critical flaws exist in products related to Wireless Bluetooth – including...

8.2AI score0.01748EPSS
SaveExploits0References28
Positive Technologies
Positive Technologies
added 2020/11/10 12:0 a.m.2 views

PT-2020-4745 · Intel · Intel Amt

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.80 IntelR AMT versions prior to 11.12.80 IntelR AMT versions prior to 11.22.80 IntelR AMT versions prior to 12.0.70 IntelR AMT versions prior to 14.0.45 Description: The issue is related to an out-of-bounds...

6.7CVSS6.9AI score0.00417EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2020/11/10 12:0 a.m.8 views

PT-2020-4865 · Intel · Intel Ism +1

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions before 11.8.80 IntelR AMT versions before 11.12.80 IntelR AMT versions before 11.22.80 IntelR AMT versions before 12.0.70 IntelR AMT versions before 14.0.45 IntelR ISM versions before 11.8.80 IntelR ISM versions before...

9.8CVSS9.4AI score0.01686EPSS
SaveExploits0References7
Hewlett-Packard
Hewlett-Packard
added 2020/11/09 12:0 a.m.108 views

HPSBHF03703 rev. 4 - Intel® 2020.2 IPU - CSME, SPS, TXE, AMT, and DAL Security Update

Potential Security Impact Escalation of Privilege, Denial of Service, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in Intel® Converged Security and...

8.2CVSS0.8AI score0.01728EPSS
SaveExploits0
Lenovo
Lenovo
added 2020/11/04 5:15 p.m.43 views

Embedded Host Based Configuration (EHBC) feature of Intel AMT Enabled - Lenovo Support US

No description provided...

6.7CVSS6.5AI score0.00554EPSS
SaveExploits1
NVD
NVD
added 2020/09/10 3:16 p.m.23 views

CVE-2020-8758

Improper buffer restrictions in network subsystem in provisioned IntelR AMT and IntelR ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an unauthenticated user to potentially enable escalation of privilege via network access. On un-provisioned systems, an authenticat...

9.8CVSS0.01686EPSS
SaveExploits0References2
Prion
Prion
added 2020/09/10 3:16 p.m.31 views

Buffer overflow

Improper buffer restrictions in network subsystem in provisioned IntelR AMT and IntelR ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an unauthenticated user to potentially enable escalation of privilege via network access. On un-provisioned systems, an authenticat...

7.5CVSS9.3AI score0.01686EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2020/09/10 2:22 p.m.34 views

CVE-2020-8758

Improper buffer restrictions in network subsystem in provisioned IntelR AMT and IntelR ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an unauthenticated user to potentially enable escalation of privilege via network access. On un-provisioned systems, an authenticat...

9.5AI score0.01686EPSS
SaveExploits0References2
CVE
CVE
added 2020/09/10 2:22 p.m.208 views

CVE-2020-8758

CVE-2020-8758 affects Intel AMT/ISM: improper buffer restrictions in the network subsystem may allow escalation of privilege. In provisioned systems, an unauthenticated attacker on the network can potentially escalate privileges; on un-provisioned systems, an authenticated user may escalate via l...

9.8CVSS9.3AI score0.01686EPSS
SaveExploits0References2Affected Software2
ThreatPost
ThreatPost
added 2020/09/08 8:34 p.m.108 views

Critical Intel Active Management Technology Flaw Allows Privilege Escalation

Intel patched a critical privilege escalation vulnerability in its Active Management Technology AMT, which is used for remote out-of-band management of PCs. AMT is part of the Intel vPro platform Intel’s umbrella marketing term for its collection of computer hardware technologies and is primarily...

7.5CVSS9.2AI score0.05272EPSS
SaveExploits1References13
Lenovo
Lenovo
added 2020/09/06 7:24 p.m.76 views

Intel AMT and Intel ISM Advisory - Lenovo Support US

Lenovo Security Advisory: LEN-41856 Potential Impact: Privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-8758 Summary Description: Intel reported potential security vulnerabilities in Intel Active Management Technology AMT and Intel Standard Manageability...

7.5CVSS0.8AI score0.01686EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/07/28 12:0 a.m.54 views

Juniper Junos NFX150 Multiple Vulnerabilities (JSA11026)

According to its self-reported version, the remote Junos OS device is affected by multiple vulnerabilities in the BIOS firmware, including the following: - Logic issue in subsystem in IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potential...

9.8CVSS6.8AI score0.02703EPSS
SaveExploits0References26
Tenable Nessus
Tenable Nessus
added 2020/06/19 12:0 a.m.32 views

Intel Converged Security Management Engine (CSME) Active Management Technology (AMT) Multiple Vulnerabilities (INTEL-SA-00295)

Binary data wmiINTEL-SA-00295.nbin...

9.8CVSS7AI score0.03536EPSS
SaveExploits0References21
Rows per page
Query Builder