2020.2 IPU – Intel® CSME, SPS, TXE, and AMT Advisory

Summary: Potential security vulnerabilities in Intel® Converged Security and Manageability Engine CSME, Server Platform Services SPS, Intel® Trusted Execution Engine TXE, Intel® Dynamic Application Loader DAL, Intel® Active Management Technology AMT, Intel® Standard Manageability ISM and Intel®...

System of the Intel Unauthorized Access

The vulnerability in the Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient flow control. Exploitation of this vulnerability may allow an attacker to gain unauthorized access to protected information...

Intel Converged Security and Manageability Engine Privilege Escalation

The vulnerability of the DAL subsystem of the Intel Converged Security and Manageability Engine CSME and the Intel Trusted Execution Engine TXE is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...

PT-2020-4859

Name of the Vulnerable Software and Affected Versions: Intel Converged Security and Manageability Engine CSME versions prior to 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45, and 14.5.25 Intel Trusted Execution Engine TXE versions prior to 3.1.80 and 4.0.30 Description: The iss...

Information Disclosure

The vulnerability of Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

PT-2019-3835

Name of the Vulnerable Software and Affected Versions Intel Converged Security and Manageability Engine CSME versions prior to 12.0.45 Intel Converged Security and Manageability Engine CSME versions prior to 13.0.10 Intel Converged Security and Manageability Engine CSME versions prior to 14.0.10...

PT-2019-3841

Name of the Vulnerable Software and Affected Versions Intel Converged Security and Manageability Engine CSME versions prior to 11.8.70 Intel Converged Security and Manageability Engine CSME versions prior to 12.0.45 Intel Converged Security and Manageability Engine CSME versions prior to 13.0.10...

Intel Converged Security and Manageability Engine Buffer Overflow Privilege Escalation

The vulnerability in the Intel Converged Security and Manageability Engine CSME microprogramming subsystem is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...

PT-2019-2110

Name of the Vulnerable Software and Affected Versions Intel Converged Security and Manageability Engine CSME versions 12.0.0 through 12.0.34 Description The issue is related to a buffer overflow in the Intel Converged Security and Manageability Engine CSME subsystem. This could allow a remote...

PT-2019-2203

Name of the Vulnerable Software and Affected Versions Intel Converged Security and Manageability Engine versions prior to 11.8.65 Intel Converged Security and Manageability Engine versions prior to 11.11.65 Intel Converged Security and Manageability Engine versions prior to 11.22.65 Intel Converg...

PT-2019-2192

Name of the Vulnerable Software and Affected Versions Intel Converged Security and Manageability Engine CSME versions prior to 12.0.35 Description The issue is related to a buffer overflow in the Intel Dynamic Application Loader DAL subsystem of the Intel Converged Security and Manageability Engi...

PT-2019-2201

Name of the Vulnerable Software and Affected Versions Intel Converged Security and Manageability Engine versions prior to 11.8.65 Intel Converged Security and Manageability Engine versions prior to 11.11.65 Intel Converged Security and Manageability Engine versions prior to 11.22.65 Intel Converg...

PT-2019-2200

Name of the Vulnerable Software and Affected Versions Intel Converged Security and Manageability Engine versions prior to 11.8.65 Intel Converged Security and Manageability Engine versions prior to 11.11.65 Intel Converged Security and Manageability Engine versions prior to 11.22.65 Intel Converg...

PT-2019-1626

Name of the Vulnerable Software and Affected Versions Intel Converged Security and Manageability Engine CSME versions prior to 11.8.60, 11.11.60, 11.22.60 or 12.0.20 Intel Trusted Execution Engine TXE versions prior to 3.1.60 or 4.0.10 Intel Server Platform Services SPS versions prior to...

PT-2019-1628

Name of the Vulnerable Software and Affected Versions Intel Converged Security and Manageability Engine CSME versions prior to 11.8.60, 11.11.60, 11.22.60, or 12.0.20 Intel Trusted Execution Engine TXE versions prior to 3.1.60 or 4.0.10 Description The issue is related to a buffer overflow in...