PT-2019-1670

Name of the Vulnerable Software and Affected Versions IntelR CSME versions prior to 11.8.60 IntelR CSME versions prior to 11.11.60 IntelR CSME versions prior to 11.22.60 IntelR CSME versions prior to 12.0.20 Description The issue is related to insufficient input validation in IntelR AMT in IntelR...

PT-2019-1671

Name of the Vulnerable Software and Affected Versions IntelR CSME versions prior to 11.8.60 IntelR CSME versions prior to 11.11.60 IntelR CSME versions prior to 11.22.60 IntelR CSME versions prior to 12.0.20 Description The issue is related to insufficient input validation in IntelR AMT, which ma...

Siemens Intel Active Management Technology of SIMATIC IPCs

1. EXECUTIVE SUMMARY CVSS v3 6.7 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: Intel Active Management Technology AMT of SIMATIC IPCs Vulnerabilities: Cryptographic Issues, Improper Restriction of Operations within the Bounds of a Memory Buffer, Resource...

2019.2 IPU – Intel® CSME, Intel® SPS, Intel® TXE, Intel® AMT, Intel® PTT and Intel® DAL Advisory

Summary: Potential security vulnerabilities in Intel® Converged Security and Manageability Engine CSME, Intel® Server Platform Services SPS, Intel® Trusted Execution Engine TXE, Intel® Active Management Technology AMT, Intel® Platform Trust Technology PTT and Intel® Dynamic Application Loader DAL...

amt-niemegk.de XSS vulnerability

Open Bug Bounty ID: OBB-719770 Description| Value ---|--- Affected Website:| amt-niemegk.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

amt-altdoebern.de XSS vulnerability

Open Bug Bounty ID: OBB-719767 Description| Value ---|--- Affected Website:| amt-altdoebern.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

amt-beetzsee.de XSS vulnerability

Open Bug Bounty ID: OBB-719760 Description| Value ---|--- Affected Website:| amt-beetzsee.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

amt-schradenland.de XSS vulnerability

Open Bug Bounty ID: OBB-719754 Description| Value ---|--- Affected Website:| amt-schradenland.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

amt-nennhausen.de XSS vulnerability

Open Bug Bounty ID: OBB-719756 Description| Value ---|--- Affected Website:| amt-nennhausen.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

amt-suedangeln.de XSS vulnerability

Open Bug Bounty ID: OBB-704431 Description| Value ---|--- Affected Website:| amt-suedangeln.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

HPSBHF03600 rev. 2 - Insecure Handling of BIOS and AMT Passwords

Potential Security Impact Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY A potential security vulnerability has been identified with the Intel platform code firmware included in certain Intel vPro Processor families with AMT...

Insecure Handling of BIOS and AMT Passwords in Intel Platform Sample Firmware - US

Lenovo Security Advisory: LEN-23848 Potential Impact: Information disclosure Severity: High Scope of Impact: Industry wide CVE Identifier: CVE-2017-5704 Summary Description: Platform sample firmware supplied by Intel for multiple processor familes, and incorporated by Lenovo into multiple product...

CVE-2018-3616

Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network...

CVE-2018-3657

Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access...

CVE-2018-3658

Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access...

CVE-2018-3658

Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access...

Design/Logic Flaw

Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access...

Buffer overflow

Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access...

CVE-2018-3616

CVE-2018-3616 is a Bleichenbacher-style side-channel vulnerability in the TLS implementation of Intel AMT/CSME firmware prior to 12.0.5. An unauthenticated attacker could potentially obtain the TLS session key over the network. Public-internal sources confirm impact on Intel AMT/CSME (TLS) with C...

CVE-2018-3658

CVE-2018-3658 affects Intel AMT in Intel CSME firmware prior to 12.0.5. The issue is described as multiple memory leaks that may allow an unauthenticated, Intel AMT-provisioned user to cause a partial denial of service over the network. Remediation: upgrade to the latest Intel CSME firmware versi...