CVE-2020-24507

Improper initialization in a subsystem in the IntelR CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2020-8703

Improper buffer restrictions in a subsystem in the IntelR CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a privileged user to potentially enable escalation of privilege via local access...

Intel CSME 安全漏洞

CSME is known as the Intel Management Engine BIOS Extension. A security vulnerability exists in Intel CSME that stems from a modification in the subsystem that assumes immutable data may allow an unauthenticated user to potentially enable privilege escalation through physical access. The followin...

CSME 信息泄露漏洞

CSME is known as the Intel Management Engine BIOS Extension. An information disclosure vulnerability exists in IntelR CSME that stems from improper subsystem initialization in CSME, which could allow a privileged user to locally access sensitive information, resulting in an information disclosure...

CSME 缓冲区错误漏洞

CSME is known as Intel Management Engine BIOS Extension A buffer error vulnerability exists in IntelR CSME that stems from improper buffer limitations in the subsystem, which could allow an attacker to escalate privileges via local access. The following products and versions are affected: 11.8.86...

CSME 缓冲区错误漏洞

CSME is known as Intel Management Engine BIOS Extension IntelR CSME suffers from a buffer error vulnerability that originates from an out-of-bounds read in a subsystem, which could allow a privileged user to locally access sensitive information, resulting in an information disclosure. The followi...

CSME安全漏洞

CSME is known as the Intel Management Engine BIOS Extension. A security vulnerability exists in CSME that stems from insufficient control flow management in the subsystem, which could allow an attacker to escalate privileges via local access. The following products and versions are affected:...

The vulnerability of the CloudForms Management Engine, a software platform for managing virtual environments, lies in the lack of protection against Cross-Site Request Forgery attacks (CSRF). This allows attackers to perform arbitrary actions within the context of the current user.

The vulnerability of the CloudForms Management Engine, a software platform for managing virtual environments, is related to the lack of protection against Cross-Site Request Forgery attacks CSRF. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on behalf of the...

Logic Flaw Vulnerability in Riptide Networks ASME Access Sharing Management Engine

ASME Access Sharing Management Engine is an anti-proxy product based on DPI application layer detection. A logic flaw vulnerability exists in the ASME Access Sharing Management Engine of Ruijie Network. Attackers can view and modify the return packets by capturing packets, fill in passwords at...

The vulnerability of the CloudForms Management Engine, a software platform for managing virtual environments, stems from insufficient validation of input data. This allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the CloudForms Management Engine, a software platform for managing virtual environments, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to elevate their privileges to root and execute arbitrary code...

RHEL 8 : CloudForms 5.0.10 (RHSA-2020:5554)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5554 advisory. Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual environments...

Important: Red Hat Security Advisory: CloudForms 5.0.10 security, bug fix and enhancement update

An update is now available for CloudForms Management Engine 5.11. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

Intel Converged Security Management Engine (CSME) Active Management Technology (AMT) Multiple Vulnerabilities (INTEL-SA-00391)

Binary data wmiINTEL-SA-00391.nbin...

CVE-2020-8761

Inadequate encryption strength in subsystem for IntelR CSME versions before 13.0.40 and 13.30.10 may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2020-8755

Race condition in subsystem for IntelR CSME versions before 12.0.70 and 14.0.45, IntelR SPS versions before E504.01.04.400 and E305.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2020-8744

Improper initialization in subsystem for IntelR CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, IntelR TXE versions before 4.0.30 IntelR SPS versions before E305.01.04.200 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8752

Out-of-bounds write in IPv6 subsystem for IntelR AMT, IntelR ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access...

CVE-2020-8705

Insecure default initialization of resource in IntelR Boot Guard in IntelR CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, IntelR TXE versions before 3.1.80 and 4.0.30, IntelR SPS versions before E504.01.04.400, E304.01.04.200, SoC-X04.00.04.200...

CVE-2020-12303

Use after free in DAL subsystem for IntelR CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, IntelR TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access...

CVE-2020-12297

Improper access control in Installer for IntelR CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access...