Intel Active Management Technology Code Execution

The vulnerability of the Intel AMT microprogramming software, the Intel Converged Security and Manageability Engine CSME, and the Intel Management Engine ME, arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow a perpetrator to execute arbitrary...

Active Management Technology subsystem Code Execution

The vulnerability of the Active Management Technology subsystem of the Intel Converged Security Manageability Engine arises due to buffer overflows during HTTP request processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2018-3632

Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x / 7.x / 8.x / 9.x / 10.x / 11.0 / 11.5 / 11.6 / 11.7 / 11.10 / 11.20 could be triggered by an attacker with local administrator permission on the system...

CVE-2018-3632

CVE-2018-3632 describes memory corruption in Intel Active Management Technology (AMT) within the Intel Converged Security and Manageability Engine (CSME) firmware, affecting versions 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x (including 11.0, 11.5, 11.6, 11.7, 11.10, 11.20). An attacker with local admini...

PT-2018-16103

Name of the Vulnerable Software and Affected Versions Intel Converged Security Manageability Engine Firmware versions 3.x through 11.x Description A buffer overflow issue exists in the event handler of Intel Active Management Technology, potentially allowing an attacker to cause a denial of servi...

PT-2018-1389

Name of the Vulnerable Software and Affected Versions Intel Converged Security Manageability Engine Firmware versions 3.x through 11.x Description The issue is caused by a buffer overflow in the HTTP handler of the Active Management Technology subsystem in the Intel Converged Security Manageabili...

CVE-2018-3632: Out-of-bounds Write

Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x / 7.x / 8.x / 9.x / 10.x / 11.0 / 11.5 / 11.6 / 11.7 / 11.10 / 11.20 could be triggered by an attacker with local administrator permission on the system...

PT-2018-16104

Name of the Vulnerable Software and Affected Versions Intel Converged Security Manageability Engine Firmware versions 6.x through 11.20 Description The issue is related to memory corruption in Intel Active Management Technology. It could be triggered by an attacker with local administrator...

CVE-2018-3629: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to cause a denial of service via the same subnet...

CVE-2018-3628: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to execute arbitrary code via the same subnet...