CVE-2025-27708: Out-of-bounds Read

Out-of-bounds read in the firmware for some IntelR Converged Security and Management Engine CSME Firmware FW within Ring 0: Kernel may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may...

CVE-2025-20037: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use race condition in firmware for some IntelR Converged Security and Management Engine may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-38102: Improper Input Validation

Improper Input validation in firmware for some IntelR Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may allow a privileged user to potentially enable denial of service via local access...

PT-2023-13588

Name of the Vulnerable Software and Affected Versions IntelR Converged Security and Management Engine versions prior to 15.0.45 IntelR Converged Security and Management Engine versions prior to 16.1.27 Description The issue is related to improper input validation in the firmware of some IntelR...

CVE-2019-11106

Insufficient session validation in the subsystem for IntelR CSME before versions 11.8.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access...

Intel TXE and Intel Converged Security and Management Engine Code Issue Vulnerabilities

Intel Converged Security and Management Engine CSME and Intel TXE are both products of Intel Corporation, U.S.A. Intel Converged Security and Management Engine is a security management engine. Intel TXE is a trust execution engine with hardware authentication capabilities for use in CPUs central...

Intel Converged Security and Management Engine Information Disclosure Vulnerability

Intel Converged Security and Management Engine CSME and Intel TXE are both products of Intel Corporation, U.S.A. Intel Converged Security and Management Engine is a security management engine. Intel TXE is a trust execution engine with hardware authentication capabilities for use in CPUs central...

Buffer Overflow Vulnerability in Multiple Intel Products

Intel Converged Security and Management Engine CSME, etc. are products of Intel Corporation.Intel Converged Security and Management Engine is a security management engine.Intel Server Platform Services is a server platform service program.Intel TXE is a trust execution engine with hardware...

PT-2018-16108

Name of the Vulnerable Software and Affected Versions IntelR Converged Security and Management Engine CSME versions prior to 11.8.55 IntelR Converged Security and Management Engine CSME versions prior to 11.11.55 IntelR Converged Security and Management Engine CSME versions prior to 11.21.55 Inte...

CVE-2018-3643: Undefined Security Weakness

A vulnerability in Power Management Controller firmware in systems using specific IntelR Converged Security and Management Engine CSME before version 11.8.55, 11.11.55, 11.21.55, 12.0.6 or IntelR Server Platform Services firmware before version 4.x.04 may allow an attacker with administrative...