CVE-2020-0539: Improper Limitation of a Pathname to a Restricted Directory

Path traversal in subsystem for IntelR DAL software for IntelR CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 and IntelR TXE versions before 3.1.75, 4.0.25 may allow an unprivileged user to potentially enable denial of service via local access...

CVE-2020-0536: Improper Input Validation

Improper input validation in the DAL subsystem for IntelR CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and IntelR TXE versions before 3.1.75 and 4.0.25 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2020-0534: Improper Input Validation

Improper input validation in the DAL subsystem for IntelR CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2020-0533: Inadequate Encryption Strength

Reversible one-way hash in IntelR CSME versions before 11.8.76, 11.12.77 and 11.22.77 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access...

PT-2020-4241

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 IntelR TXE versions prior to 3.1.75, 4.0.25 Description: The issue is related to a path traversal vulnerability in the Intel Dynamic Application Loader DAL...

PT-2020-4144

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 11.8.77 IntelR CSME versions prior to 11.12.77 IntelR CSME versions prior to 11.22.77 IntelR CSME versions prior to 12.0.64 IntelR CSME versions prior to 13.0.32 IntelR CSME versions prior to 14.0.33 IntelR TXE...

PT-2020-4052

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 12.0.64 IntelR CSME versions prior to 13.0.32 IntelR CSME versions prior to 14.0.33 IntelR CSME versions prior to 14.5.12 Description: The issue is caused by insufficient input validation in the DAL subsystem,...

PT-2020-4055

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 12.0.64 IntelR CSME versions prior to 13.0.32 IntelR CSME versions prior to 14.0.33 IntelR CSME versions prior to 14.5.12 Description: The issue is related to improper buffer restrictions in a subsystem, which ma...

PT-2020-4048

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 12.0.64 IntelR CSME versions prior to 13.0.32 IntelR CSME versions prior to 14.0.33 IntelR CSME versions prior to 14.5.12 Description: The issue is related to an out-of-bounds write in a subsystem, which may allo...

PT-2020-4051

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 11.8.76 IntelR CSME versions prior to 11.12.77 IntelR CSME versions prior to 11.22.77 Description: The issue is related to a reversible one-way hash in IntelR CSME, which may allow a privileged user to potentiall...

CVE-2019-14598

Improper Authentication in subsystem in IntelR CSME versions 12.0 through 12.0.48 IOT only: 12.0.56, versions 13.0 through 13.0.20, versions 14.0 through 14.0.10 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access...

CVE-2019-14598: Improper Authentication

Improper Authentication in subsystem in IntelR CSME versions 12.0 through 12.0.48 IOT only: 12.0.56, versions 13.0 through 13.0.20, versions 14.0 through 14.0.10 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access...

CVE-2019-11106

Insufficient session validation in the subsystem for IntelR CSME before versions 11.8.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access...

Input validation

Insufficient input validation in the subsystem for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege, information disclosure or denial of...

Input validation

Insufficient input validation in IntelR DAL software for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2019-0168: Improper Input Validation

Insufficient input validation in the subsystem for IntelR CSME before versions 11.8.70, 12.0.45 and 13.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2019-11102: Improper Input Validation

Insufficient input validation in IntelR DAL software for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2019-11101: Improper Input Validation

Insufficient input validation in the subsystem for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2019-11087: Improper Input Validation

Insufficient input validation in the subsystem for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege, information disclosure or denial of...

CVE-2019-11110: Undefined Security Weakness

Authentication bypass in the subsystem for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access...