Lucene search
K

6 matches found

ThreatPost
ThreatPost
added 2021/11/15 8:52 p.m.44 views

High-Severity Intel Processor Bug Exposes Encryption Keys

A security vulnerability in Intel chips opens the door for encrypted file access and espionage, plus the ability to bypass copyright protection for digital content. That’s according to Positive Technologies PT, which found that the vulnerability CVE-2021-0146 is a debugging functionality with...

6.8CVSS7AI score0.00407EPSS
Exploits0References5
OSV
OSV
added 2019/12/18 10:15 p.m.1 views

CVE-2019-11090

Cryptographic timing conditions in the subsystem for IntelR PTT before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0 and 14.0.10; IntelR TXE 3.1.70 and 4.0.20; IntelR SPS before versions SPSE504.01.04.305.0, SPSSoC-X04.00.04.108.0, SPSSoC-A04.00.04.191.0, SPSE304.01.04.086.0,...

5.9CVSS7AI score0.02323EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.1 views

The vulnerability of the Intel Platform Trust Technology (PTT) platform for storing account data and managing keys, along with the microsoftware Intel Trusted Execution Engine (TXE) and Intel Server Platform Services, arises from the lack of protection for operational data. This allows attackers to gain access to the cryptographic keys stored in the Trusted Platform Module (TPM).

The vulnerability of the Intel Platform Trust Technology-based data storage and key management platform, along with the Intel Trusted Execution Engine software and Intel Server Platform Services, is related to the lack of protection for sensitive data. Exploiting this vulnerability could allow a...

6.8CVSS7.2AI score0.02323EPSS
Exploits0References2Affected Software2
CNVD
CNVD
added 2019/12/05 12:0 a.m.1 views

Competitive conditions issue vulnerability for multiple Intel products

Intel Server Platform Services SPS, etc. are products of Intel Corporation. Intel Server Platform Services is a server platform service program. Intel TXE is a trust execution engine used in CPUs central processing units with hardware authentication capabilities. Intel Platform Trust Technology P...

5.9CVSS7AI score0.02323EPSS
Exploits0References1
OSV
OSV
added 2018/09/12 7:29 p.m.2 views

CVE-2018-3659

A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to potentially disclose information via physical access...

6.8CVSS5.7AI score0.00423EPSS
Exploits0References2
Intel
Intel
added 2018/09/11 12:0 a.m.32 views

Intel® Platform Trust Technology (PTT) Update Advisory

Summary: A potential vulnerability in the Intel® PTT module in Intel® CSME firmware and Intel® TXE firmware may allow information disclosure. Intel is releasing Intel® CSME firmware and Intel® TXE firmware updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2018-365...

6.8CVSS6.3AI score0.00423EPSS
Exploits0
Rows per page
Query Builder