Double free

Use after free in Kernel Mode Driver for IntelR TXE versions before 3.1.80 and 4.0.30 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12355

Authentication bypass by capture-replay in RPMB protocol message authentication subsystem in IntelR TXE versions before 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2020-8750

Use after free in Kernel Mode Driver for IntelR TXE versions before 3.1.80 and 4.0.30 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8751: Undefined Security Weakness

Insufficient control flow management in subsystem for IntelR CSME versions before 11.8.80, IntelR TXE versions before 3.1.80 may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2020-8705: Initialization of a Resource with an Insecure Default

Insecure default initialization of resource in IntelR Boot Guard in IntelR CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, IntelR TXE versions before 3.1.80 and 4.0.30, IntelR SPS versions before E504.01.04.400, E304.01.04.200, SoC-X04.00.04.200...

CVE-2020-8744: Improper Initialization

Improper initialization in subsystem for IntelR CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, IntelR TXE versions before 4.0.30 IntelR SPS versions before E305.01.04.200 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8745: Undefined Security Weakness

Insufficient control flow management in subsystem for IntelR CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , IntelR TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physica...

CVE-2020-8750: Use After Free

Use after free in Kernel Mode Driver for IntelR TXE versions before 3.1.80 and 4.0.30 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12355: Authentication Bypass by Capture-replay

Authentication bypass by capture-replay in RPMB protocol message authentication subsystem in IntelR TXE versions before 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

PT-2020-4698

Name of the Vulnerable Software and Affected Versions IntelR TXE versions before 3.1.80 IntelR TXE versions before 4.0.30 Description The issue is related to a use after free vulnerability in the Kernel Mode Driver for IntelR TXE, which can be exploited to potentially enable escalation of privile...

PT-2020-4733

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 11.8.80 IntelR TXE versions prior to 3.1.80 Description: The issue is related to insufficient control flow management in the subsystem for IntelR CSME and IntelR TXE, which may allow an unauthenticated user to...

PT-2020-4895

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 IntelR TXE versions prior to 3.1.80 and 4.0.30 IntelR SPS versions prior to E5 04.01.04.400, E3 04.01.04.200, SoC-X 04.00.04.200 and...

Input validation

Improper input validation in the DAL subsystem for IntelR CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and IntelR TXE versions before 3.1.75 and 4.0.25 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2020-0566: Undefined Security Weakness

Improper Access Control in subsystem for IntelR TXE versions before 3.175 and 4.0.25 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2020-0545: Integer Overflow or Wraparound

Integer overflow in subsystem for IntelR CSME versions before 11.8.77, 11.12.77, 11.22.77 and IntelR TXE versions before 3.1.75, 4.0.25 and IntelR Server Platform Services SPS versions before SPSE504.01.04.380.0, SPSSoC-X04.00.04.128.0, SPSSoC-A04.00.04.211.0, SPSE304.01.04.109.0,...

CVE-2020-0539: Improper Limitation of a Pathname to a Restricted Directory

Path traversal in subsystem for IntelR DAL software for IntelR CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 and IntelR TXE versions before 3.1.75, 4.0.25 may allow an unprivileged user to potentially enable denial of service via local access...

CVE-2020-0536: Improper Input Validation

Improper input validation in the DAL subsystem for IntelR CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and IntelR TXE versions before 3.1.75 and 4.0.25 may allow an unauthenticated user to potentially enable information disclosure via network access...

PT-2020-4144

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 11.8.77 IntelR CSME versions prior to 11.12.77 IntelR CSME versions prior to 11.22.77 IntelR CSME versions prior to 12.0.64 IntelR CSME versions prior to 13.0.32 IntelR CSME versions prior to 14.0.33 IntelR TXE...

PT-2020-4050

Name of the Vulnerable Software and Affected Versions: IntelR TXE versions before 3.175 IntelR TXE versions before 4.0.25 Description: The issue is related to improper access control in the IntelR TXE subsystem, which may allow an unauthenticated user to potentially enable escalation of privilege...

PT-2020-4241

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 IntelR TXE versions prior to 3.1.75, 4.0.25 Description: The issue is related to a path traversal vulnerability in the Intel Dynamic Application Loader DAL...