CVE-2025-20067: Observable Timing Discrepancy

Observable timing discrepancy in firmware for some IntelR CSME and IntelR SPS may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-40067: Unchecked Return Value

Unchecked return value in firmware for some IntelR CSME may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2023-34424: Improper Input Validation

Improper input validation in firmware for some IntelR CSME may allow a privileged user to potentially enable denial of service via local access...

CVE-2024-21844: Integer Overflow or Wraparound

Integer overflow in firmware for some IntelR CSME may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2023-48361: Improper Initialization

Improper initialization in firmware for some IntelR CSME may allow a privileged user to potentially enable information disclosure via local access...

PT-2024-7026

Name of the Vulnerable Software and Affected Versions IntelR CSME affected versions not specified Description The issue is related to an integer overflow in the firmware of some IntelR CSME, which may allow an unauthenticated user to potentially enable denial of service via adjacent access. This...

CVE-2023-32633: Improper Input Validation

Improper input validation in the IntelR CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28389: Incorrect Default Permissions

Incorrect default permissions in some IntelR CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-2523

Name of the Vulnerable Software and Affected Versions IntelR CSME installer software versions prior to 2328.5.5.0 Description The issue is related to incorrect default permissions in some IntelR CSME installer software, which may allow an authenticated user to potentially enable escalation of...

CVE-2022-29871: Improper Access Control

Improper access control in the IntelR CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36392: Improper Input Validation

Improper input validation in some firmware for IntelR AMT and IntelR Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel R CSME may allow an unauthenticated user to potentially enable denial of service via network access...

Privilege escalation

Modification of assumed-immutable data in subsystem in IntelR CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

PT-2021-12811

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions before 11.8.86 IntelR CSME versions before 11.12.86 IntelR CSME versions before 11.22.86 IntelR CSME versions before 12.0.81 IntelR CSME versions before 13.0.47 IntelR CSME versions before 13.30.17 IntelR CSME versions...

PT-2021-11043

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 13.0.47 IntelR CSME versions prior to 13.30.17 IntelR CSME versions prior to 14.1.53 IntelR CSME versions prior to 14.5.32 IntelR CSME versions prior to 15.0.22 Description: The issue involves the modification of...

PT-2021-11039

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 11.8.86 IntelR CSME versions prior to 11.12.86 IntelR CSME versions prior to 11.22.86 IntelR CSME versions prior to 12.0.81 IntelR CSME versions prior to 13.0.47 IntelR CSME versions prior to 13.30.17 IntelR CSME...

PT-2021-11038

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 12.0.81 IntelR CSME versions prior to 13.0.47 IntelR CSME versions prior to 13.30.17 IntelR CSME versions prior to 14.1.53 IntelR CSME versions prior to 14.5.32 Description: The issue is related to an out of boun...

CVE-2020-8703: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in a subsystem in the IntelR CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-24506: Out-of-bounds Read

Out of bound read in a subsystem in the IntelR CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2020-24516: Undefined Security Weakness

Modification of assumed-immutable data in subsystem in IntelR CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2020-24507: Improper Initialization

Improper initialization in a subsystem in the IntelR CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may allow a privileged user to potentially enable information disclosure via local access...