CVE-2023-34424

Improper input validation in firmware for some IntelR CSME may allow a privileged user to potentially enable denial of service via local access...

CVE-2023-48361

Improper initialization in firmware for some IntelR CSME may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-21844

CVE-2024-21844 describes an integer overflow in firmware for some Intel CSME that could allow an unauthenticated user to cause a denial of service via adjacent access. The impact is a local/adjacent-access DoS with low to moderate severity depending on metric set; exploitation details are not pro...

CVE-2023-48361

Improper initialization in firmware for some IntelR CSME may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-21844

Integer overflow in firmware for some IntelR CSME may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2023-48361

CVE-2023-48361: Improper initialization in Intel CSME firmware can allow a privileged local user to cause information disclosure. The issue is documented in Intel’s advisory (Intel SA-00999) and linked sources, with affected Intel CSME/AMT-related firmware. CVSS vectors indicate local attack requ...

CVE-2023-40067

Unchecked return value in firmware for some IntelR CSME may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2023-32633

Improper input validation in the IntelR CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28389

Incorrect default permissions in some IntelR CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32633

Improper input validation in the IntelR CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32633

Improper input validation in the IntelR CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32633

CVE-2023-32633 concerns Intel® Converged Security Management Engine (CSME) installer: improper input validation before version 2328.5.5.0 may allow an authenticated user to escalate privileges via local access. The issue is documented with affected component as the CSME installer and is tied to l...

CVE-2023-28389

Incorrect default permissions in some IntelR CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28389

Incorrect default permissions in some IntelR CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28389

CVE-2023-28389 is an Intel CSME-related issue described in multiple sources. Affected software: Intel® Converged Security Management Engine (CSME) installer software prior to version 2328.5.5.0. Root cause: incorrect default permissions in the installer could allow an authenticated user to escala...

CVE-2022-29871

Improper access control in the IntelR CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in the IntelR CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-29871

Improper access control in the IntelR CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-29871

Improper access control in the IntelR CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-29871

CVE-2022-29871 : Improper access control in the Intel® CSME software installer before version 2306.4.10.0 may allow an authenticated user to escalate privileges via local access. Documented impact: local escalation with high confidentiality/integrity/availability implications. Affected Intel CSME...