CVE-2020-0545: Integer Overflow or Wraparound

Integer overflow in subsystem for IntelR CSME versions before 11.8.77, 11.12.77, 11.22.77 and IntelR TXE versions before 3.1.75, 4.0.25 and IntelR Server Platform Services SPS versions before SPSE504.01.04.380.0, SPSSoC-X04.00.04.128.0, SPSSoC-A04.00.04.211.0, SPSE304.01.04.109.0,...

PT-2019-8870

Name of the Vulnerable Software and Affected Versions IntelR CSME versions prior to 11.21.55 IntelR Server Platform Services versions prior to 4.0 IntelR Trusted Execution Engine Firmware versions prior to 3.1.55 Description The issue is related to insufficient input validation in the HECI...

CVE-2019-0090: Undefined Security Weakness

Insufficient access control vulnerability in subsystem for IntelR CSME before versions 11.x, 12.0.35 IntelR TXE 3.x, 4.x, IntelR Server Platform Services 3.x, 4.x, IntelR SPS before version SPSE305.00.04.027.0 may allow an unauthenticated user to potentially enable escalation of privilege via...

PT-2019-2116

Name of the Vulnerable Software and Affected Versions IntelR CSME versions prior to 11.x IntelR TXE versions 3.x, 4.x IntelR Server Platform Services versions 3.x, 4.x IntelR SPS versions prior to SPS E3 05.00.04.027.0 Description The issue is related to insufficient access control in the Intel...

CVE-2018-12191: Improper Restriction of Operations within the Bounds of a Memory Buffer

Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or IntelR Server Platform Services before versions 4.00.04.383 or SPS 4.01.02.174, or IntelR TXE before versions 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially execute arbitrar...

CVE-2018-12208: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in HECI subsystem in IntelR CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and IntelR TXE version before 3.1.60 or 4.0.10, or IntelR Server Platform Services before version 5.00.04.012 may allow an unauthenticated user to potentially execute arbitrary code via physica...

CVE-2018-12198: Improper Input Validation

Insufficient input validation in IntelR Server Platform Services HECI subsystem before version SPSE504.00.04.393.0 may allow privileged user to potentially cause a denial of service via local access...

CVE-2018-12192: Improper Authentication

Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or IntelR Server Platform Services before version SPSE504.00.04.393.0 may allow an unauthenticated user to potentially bypass MEBx authentication via physical access...

PT-2019-1630

Name of the Vulnerable Software and Affected Versions IntelR CSME versions prior to 11.8.60, 11.11.60, 11.22.60 or 12.0.20 IntelR TXE versions prior to 3.1.60 or 4.0.10 IntelR Server Platform Services versions prior to 5.00.04.012 Description The issue is related to a buffer overflow in the HECI...

CVE-2018-3643: Undefined Security Weakness

A vulnerability in Power Management Controller firmware in systems using specific IntelR Converged Security and Management Engine CSME before version 11.8.55, 11.11.55, 11.21.55, 12.0.6 or IntelR Server Platform Services firmware before version 4.x.04 may allow an attacker with administrative...

PT-2018-16108

Name of the Vulnerable Software and Affected Versions IntelR Converged Security and Management Engine CSME versions prior to 11.8.55 IntelR Converged Security and Management Engine CSME versions prior to 11.11.55 IntelR Converged Security and Management Engine CSME versions prior to 11.21.55 Inte...