PT-2019-4049

Name of the Vulnerable Software and Affected Versions IntelR AMT versions prior to 11.8.70 IntelR AMT versions prior to 11.11.70 IntelR AMT versions prior to 11.22.70 IntelR AMT versions prior to 12.0.45 Description The issue is related to insufficient input validation in the Intel Active...

HPSBHF03637 rev. 3 - Intel 2019.2 IPU CSME SPS TXE AMT Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, or Information Disclosure Source: Intel, HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Multiple security vulnerabilities have been identified by Intel. Intel is releasing updates for Intel®...

CVE-2019-0096

Out of bound write vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an authenticated user to potentially enable escalation of privilege via adjacent network access...

CVE-2019-0097

Insufficient input validation vulnerability in subsystem for IntelR AMT before version 12.0.35 may allow a privileged user to potentially enable denial of service via network access...

CVE-2019-0097

Insufficient input validation vulnerability in subsystem for IntelR AMT before version 12.0.35 may allow a privileged user to potentially enable denial of service via network access...

CVE-2019-0096

Out of bound write vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an authenticated user to potentially enable escalation of privilege via adjacent network access...

CVE-2019-0092

Insufficient input validation vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2019-0094

Insufficient input validation vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable denial of service via adjacent network access...

Input validation

Insufficient input validation vulnerability in subsystem for IntelR AMT before version 12.0.35 may allow a privileged user to potentially enable denial of service via network access...

Input validation

Insufficient input validation vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

Cross site scripting

Out of bound write vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an authenticated user to potentially enable escalation of privilege via adjacent network access...

Input validation

Insufficient input validation vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable denial of service via adjacent network access...

CVE-2019-0096

CVE-2019-0096 affects Intel AMT subsystem, with an out-of-bounds write in Intel AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35. Affected condition: authenticated user can potentially escalate privileges via adjacent network access. Connected documents indicate remediation through updati...

CVE-2019-0094

CVE-2019-0094 covers an insufficient input validation vulnerability in the Intel AMT subsystem that affects versions before 11.8.65, 11.11.65, 11.22.65, and 12.0.35, exposing unauthenticated users to potential denial of service via adjacent network access. Intel’s advisory and vendor security pag...

CVE-2019-0096

Out of bound write vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an authenticated user to potentially enable escalation of privilege via adjacent network access...

CVE-2019-0094

Insufficient input validation vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable denial of service via adjacent network access...

CVE-2019-0092

Insufficient input validation vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2019-0097

Insufficient input validation vulnerability in subsystem for IntelR AMT before version 12.0.35 may allow a privileged user to potentially enable denial of service via network access...

CVE-2019-0097

CVE-2019-0097 affects Intel AMT: an insufficient input validation vulnerability in the AMT subsystem prior to version 12.0.35 may allow a privileged user to cause a denial of service over the network. Affected product scope is Intel AMT/CSME with versions before 12.0.35. Remediation per Intel adv...

CVE-2019-0092

CVE-2019-0092 is an insufficient input validation vulnerability in the Intel AMT subsystem, affecting Intel CSME/AMT/DAL/SPS before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35. The NVD/NIST entry describes it as potentially enabling privilege escalation for an unauthenticated user with physical...