Input validation

Improper input validation for the IntelR Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2021-0126

This CVE (CVE-2021-0126) affects Intel® Manageability Commander before version 2.2. The root cause is improper input validation, which could allow an authenticated user to escalate privileges via adjacent access. The issue is documented with CVSS:3.1 base score 8.0 (HIGH) in the connected sources...

CVE-2021-0126

Improper input validation for the IntelR Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2021-0126

Improper input validation for the IntelR Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

Intel Manageability Commander 输入验证错误漏洞

Intel Manageability Commander is a lightweight console from Intel Corporation USA. for connecting to and using Intel Active Management Technology Intel AMT features. An input validation error vulnerability exists in Intel Manageability Commander versions prior to 2.2, which stems from incorrect...

Intel CSME Elevation of Privilege Vulnerability

Intel Core Processors is an Intel Core family of central processing units CPUs from the American company Intel. A security vulnerability exists in Intel CSME that stems from improper input validation could allow a privileged user to potentially enable privilege escalation via local access. An...

CVE-2020-8752

Out-of-bounds write in IPv6 subsystem for IntelR AMT, IntelR ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access...

CVE-2020-12356

Out-of-bounds read in subsystem in IntelR AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable information disclosure via local access...

Vulnerability in the subsystems of Microprogramming Software: Intel Converged Security and Manageability Engine, Intel Server Platform Services, and Intel Trusted Execution Engine (TXE). This vulnerability is related to lack of access control, allowing attackers to enhance their privileges.

The vulnerability in the microprogramming system components of the Intel Converged Security and Manageability Engine, Intel Server Platform Services, and Intel Trusted Execution Engine TXE is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance thei...

Intel Manageability Engine Buffer Overflow Vulnerability (CNVD-2017-37852)

Intel Manageability Engine Intel Manageability Engine is a thermal management driver from Intel for its desktop series chipsets. Intel Manageability Engine suffers from a buffer overflow vulnerability that allows attackers to exploit the vulnerability to submit special requests, execute arbitrary...

Intel Manageability Engine Buffer Overflow Vulnerability

Intel Manageability Engine Intel Manageability Engine is a thermal management driver from Intel for its desktop series chipsets. A buffer overflow vulnerability exists in the Intel Manageability Engine kernel, which allows local attackers to exploit the vulnerability to submit special requests,...

Multiple Local Buffer Overflow Vulnerabilities in Intel Manageability Engine

Intel Manageability Engine Intel Manageability Engine is a thermal management driver from Intel for its desktop series chipsets. Intel Manageability Engine suffers from multiple local buffer overflow vulnerabilities that allow attackers to exploit the vulnerabilities to submit special requests,...

Multiple Local Elevation of Privilege Vulnerabilities in Intel Manageability Engine

Intel Manageability Engine Intel Manageability Engine is a thermal management driver from Intel for its desktop series chipsets. Multiple local elevation of privilege vulnerabilities exist in Intel Manageability Engine. An attacker could exploit the vulnerabilities to access privileged content...

Buffer overflow

Multiple buffer overflows in Active Management Technology AMT in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code with AMT execution privilege...

CVE-2017-5711

Multiple buffer overflows in Active Management Technology AMT in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code with AMT execution privilege...

CVE-2017-5708

Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process to access privileged content via unspecified vector...

Design/Logic Flaw

Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process to access privileged content via unspecified vector...

CVE-2017-5712

Buffer overflow in Active Management Technology AMT in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access to the system to execute arbitrary code with AMT execution privilege...

CVE-2017-5708

Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process to access privileged content via unspecified vector...

Buffer overflow

Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code...