378 matches found
Design/Logic Flaw
Improper buffer restrictions in subsystem for IntelR CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access...
Input validation
Improper input validation in the DAL subsystem for IntelR CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and IntelR TXE versions before 3.1.75 and 4.0.25 may allow an unauthenticated user to potentially enable information disclosure via network access...
Path traversal
Path traversal in subsystem for IntelR DAL software for IntelR CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 and IntelR TXE versions before 3.1.75, 4.0.25 may allow an unprivileged user to potentially enable denial of service via local access...
Integer overflow
Integer overflow in subsystem for IntelR CSME versions before 11.8.77, 11.12.77, 11.22.77 and IntelR TXE versions before 3.1.75, 4.0.25 and IntelR Server Platform Services SPS versions before SPSE504.01.04.380.0, SPSSoC-X04.00.04.128.0, SPSSoC-A04.00.04.211.0, SPSE304.01.04.109.0,...
CVE-2020-0539
CVE-2020-0539 describes a path traversal vulnerability in Intel CSME/DAL subsystems (and related TXE) that may allow an unprivileged local user to cause denial of service. Affected are Intel CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 and Intel TXE versions before ...
CVE-2020-0545
CVE-2020-0545 describes an integer overflow in the Intel CSME subsystem (and related SPS/TXE/AMT components) that may allow a privileged local attacker to cause a denial of service. Affected are Intel CSME versions before 11.8.77, 11.12.77, 11.22.77; Intel TXE before 3.1.75 and 4.0.25; and SPS fi...
CVE-2020-0545
Integer overflow in subsystem for IntelR CSME versions before 11.8.77, 11.12.77, 11.22.77 and IntelR TXE versions before 3.1.75, 4.0.25 and IntelR Server Platform Services SPS versions before SPSE504.01.04.380.0, SPSSoC-X04.00.04.128.0, SPSSoC-A04.00.04.211.0, SPSE304.01.04.109.0,...
CVE-2020-0536
Improper input validation in the DAL subsystem for IntelR CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and IntelR TXE versions before 3.1.75 and 4.0.25 may allow an unauthenticated user to potentially enable information disclosure via network access...
CVE-2020-0541
CVE-2020-0541 describes an out-of-bounds write in the Intel® CSME subsystem. Affected versions are Intel CSME before 12.0.64, 13.0.32, 14.0.33 and 14.5.12, which may allow a privileged user to escalate privileges via local access. The vulnerability is part of Intel’s broader INTEL-SA-00295 set of...
CVE-2020-0533
CVE-2020-0533 affects Intel CSME in versions before 11.8.76, 11.12.77, and 11.22.77. The issue is a reversible one-way hash that may allow a privileged user to escalate privileges, cause a DoS, or disclose information via local access. Intel (and Lenovo/HP advisories) indicate updates are availab...
CVE-2020-0533
Reversible one-way hash in IntelR CSME versions before 11.8.76, 11.12.77 and 11.22.77 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access...
CVE-2020-0534
Improper input validation in the DAL subsystem for IntelR CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an unauthenticated user to potentially enable denial of service via network access...
CVE-2020-0534
CVE-2020-0534: Intel CSME DAL subsystem has improper input validation in CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12, which may allow an unauthenticated user to cause denial of service over network access. Connected sources (Intel INTEL-SA-00295 advisory, NVD entry, and Lenovo/HP a...
CVE-2020-0542
Improper buffer restrictions in subsystem for IntelR CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access...
CVE-2020-0542
CVE-2020-0542 concerns Intel CSME: Improper buffer restrictions in the subsystem affect Intel CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12, potentially enabling escalation of privileges, information disclosure, or denial of service via local access for authenticated users. Connected...
CVE-2020-8336
Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash...
Format string
Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash...
CVE-2020-8336
Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash...
CVE-2020-8336
CVE-2020-8336 affects Lenovo ThinkPad models where Intel CSME Anti-rollback ARB protections were implemented to prevent rollback of CSME firmware in flash. The Connected documents indicate this is a firmware/boot- firmware protection mechanism, not a software vulnerability in user-space, and the ...
