Input validation

Insufficient input validation in the subsystem for IntelR AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

Cross site scripting

Cross site scripting in subsystem in IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a privileged user to potentially enable escalation of privilege via network access...

CVE-2019-11086

Insufficient input validation in subsystem for IntelR AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2019-11086

CVE-2019-11086 involves insufficient input validation in the Intel AMT subsystem prior to 12.0.45, potentially allowing an unauthenticated user with physical access to escalate privileges. Affected component: Intel AMT subsystem (Intel CSME/AMT stack). Root cause: input validation gap in the AMT ...

CVE-2019-11107

Insufficient input validation in the subsystem for IntelR AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2019-11107

CVE-2019-11107 : Affects Intel AMT subsystem; insufficient input validation before version 12.0.45 may allow an unauthenticated user to escalate privileges via network access. Public details specify the vulnerable condition and impact as described by NVD entry for CVE-2019-11107. The connected Ne...

CVE-2019-11100

Insufficient input validation in the subsystem for IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2019-11100

CVE-2019-11100 corresponds to an Intel AMT subsystem vulnerability due to insufficient input validation that could allow information disclosure by an unauthenticated user with physical access. Affected firmware versions include AMT before 11.8.70, 11.11.70, 11.22.70, and 12.0.45. Multiple connect...

CVE-2019-0166

Insufficient input validation in the subsystem for IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2019-0166

CVE-2019-0166 describes an insufficient input validation in the Intel AMT subsystem that could allow an unauthenticated user to disclose information over the network. Affected products are Intel AMT firmware prior to 11.8.70, 11.11.70, 11.22.70, and 12.0.45 (as cited across multiple sources). The...

CVE-2019-0131

CVE-2019-0131: Insufficient input validation in the subsystem of Intel AMT (and related Intel CSME/TXE/DAL components) before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to cause denial of service or information disclosure via adjacent access, with higher im...

CVE-2019-0131

Insufficient input validation in subsystem in IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access...

CVE-2019-11131

CVE-2019-11131 affects Intel AMT subsystem. A logic issue could allow an unauthenticated user to escalate privileges via network access. Affected Intel AMT versions before 11.8.70, 11.11.70, 11.22.70 and 12.0.45. Intel/HP/Lenovo advisories recommend updating AMT/CSME/TXE/DAL firmware to newer rel...

CVE-2019-11131

Logic issue in subsystem in IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2019-11088

Insufficient input validation in subsystem in IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2019-11088

CVE-2019-11088 concerns Intel AMT: Insufficient input validation in the AMT subsystem may allow an unauthenticated user to escalate privileges via adjacent access. Affected are AMT versions before 11.8.70, 11.11.70, 11.22.70 and 12.0.45 (per Intel AMT/CSME/TXE advisories). The issue is described ...

CVE-2019-11132

CVE-2019-11132 : Cross-site scripting vulnerability in the Intel Active Management Technology (AMT) subsystem prior to firmware versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 could allow a privileged user to escalate privileges via network access. The issue is documented in multiple sources (NV...

CVE-2019-11132

Cross site scripting in subsystem in IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a privileged user to potentially enable escalation of privilege via network access...

Intel Releases Security Updates

Intel has released security updates to address vulnerabilities in multiple products. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the following Intel advisories and apply the necessary updates: BMC Advisory INTEL-SA-00313 UEFI Advisory...

HPSBHF03637 rev. 3 - Intel 2019.2 IPU CSME SPS TXE AMT Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, or Information Disclosure Source: Intel, HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Multiple security vulnerabilities have been identified by Intel. Intel is releasing updates for Intel®...