CVE-2019-0091: Improper Control of Generation of Code

Code injection vulnerability in installer for IntelR CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and IntelR TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access...

CVE-2019-0086: Improper Link Resolution Before File Access

Insufficient access control vulnerability in Dynamic Application Loader software for IntelR CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and IntelR TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access...

CVE-2019-0153: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in subsystem in IntelR CSME 12.0.0 through 12.0.34 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2019-0093: Undefined Security Weakness

Insufficient data sanitization vulnerability in HECI subsystem for IntelR CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and IntelR SPS before version SPSE305.00.04.027.0 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2019-0098: Undefined Security Weakness

Logic bug vulnerability in subsystem for IntelR CSME before version 12.0.35, IntelR TXE before 3.1.65, 4.0.15 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2019-0090: Undefined Security Weakness

Insufficient access control vulnerability in subsystem for IntelR CSME before versions 11.x, 12.0.35 IntelR TXE 3.x, 4.x, IntelR Server Platform Services 3.x, 4.x, IntelR SPS before version SPSE305.00.04.027.0 may allow an unauthenticated user to potentially enable escalation of privilege via...

PT-2019-2116

Name of the Vulnerable Software and Affected Versions IntelR CSME versions prior to 11.x IntelR TXE versions 3.x, 4.x IntelR Server Platform Services versions 3.x, 4.x IntelR SPS versions prior to SPS E3 05.00.04.027.0 Description The issue is related to insufficient access control in the Intel...

PT-2019-2207

Name of the Vulnerable Software and Affected Versions IntelR CSME versions prior to 12.0.35 IntelR TXE versions prior to 3.1.65 IntelR TXE version 4.0.15 Description The issue is related to a logic bug in the subsystem, which may allow an unauthenticated user to potentially enable escalation of...

CVE-2018-12185: Improper Input Validation

Insufficient input validation in IntelR AMT in IntelR CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially execute arbitrary code via physical access...

CVE-2018-12208: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in HECI subsystem in IntelR CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and IntelR TXE version before 3.1.60 or 4.0.10, or IntelR Server Platform Services before version 5.00.04.012 may allow an unauthenticated user to potentially execute arbitrary code via physica...

CVE-2018-12190: Improper Input Validation

Insufficient input validation in Intelr CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intelr TXE before 3.1.60 or 4.0.10 may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2018-12196: Improper Input Validation

Insufficient input validation in IntelR AMT in IntelR CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a privileged user to potentially execute arbitrary code via local access...

PT-2019-1671

Name of the Vulnerable Software and Affected Versions IntelR CSME versions prior to 11.8.60 IntelR CSME versions prior to 11.11.60 IntelR CSME versions prior to 11.22.60 IntelR CSME versions prior to 12.0.20 Description The issue is related to insufficient input validation in IntelR AMT, which ma...

PT-2019-1670

Name of the Vulnerable Software and Affected Versions IntelR CSME versions prior to 11.8.60 IntelR CSME versions prior to 11.11.60 IntelR CSME versions prior to 11.22.60 IntelR CSME versions prior to 12.0.20 Description The issue is related to insufficient input validation in IntelR AMT in IntelR...

PT-2019-1630

Name of the Vulnerable Software and Affected Versions IntelR CSME versions prior to 11.8.60, 11.11.60, 11.22.60 or 12.0.20 IntelR TXE versions prior to 3.1.60 or 4.0.10 IntelR Server Platform Services versions prior to 5.00.04.012 Description The issue is related to a buffer overflow in the HECI...