Integer overflow

Integer overflow in subsystem for IntelR CSME versions before 11.8.77, 11.12.77, 11.22.77 and IntelR TXE versions before 3.1.75, 4.0.25 and IntelR Server Platform Services SPS versions before SPSE504.01.04.380.0, SPSSoC-X04.00.04.128.0, SPSSoC-A04.00.04.211.0, SPSE304.01.04.109.0,...

CVE-2020-0539

CVE-2020-0539 describes a path traversal vulnerability in Intel CSME/DAL subsystems (and related TXE) that may allow an unprivileged local user to cause denial of service. Affected are Intel CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 and Intel TXE versions before ...

CVE-2020-0545

CVE-2020-0545 describes an integer overflow in the Intel CSME subsystem (and related SPS/TXE/AMT components) that may allow a privileged local attacker to cause a denial of service. Affected are Intel CSME versions before 11.8.77, 11.12.77, 11.22.77; Intel TXE before 3.1.75 and 4.0.25; and SPS fi...

CVE-2020-0545

Integer overflow in subsystem for IntelR CSME versions before 11.8.77, 11.12.77, 11.22.77 and IntelR TXE versions before 3.1.75, 4.0.25 and IntelR Server Platform Services SPS versions before SPSE504.01.04.380.0, SPSSoC-X04.00.04.128.0, SPSSoC-A04.00.04.211.0, SPSE304.01.04.109.0,...

CVE-2020-0536

Improper input validation in the DAL subsystem for IntelR CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and IntelR TXE versions before 3.1.75 and 4.0.25 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2020-0541

CVE-2020-0541 describes an out-of-bounds write in the Intel® CSME subsystem. Affected versions are Intel CSME before 12.0.64, 13.0.32, 14.0.33 and 14.5.12, which may allow a privileged user to escalate privileges via local access. The vulnerability is part of Intel’s broader INTEL-SA-00295 set of...

CVE-2020-0533

CVE-2020-0533 affects Intel CSME in versions before 11.8.76, 11.12.77, and 11.22.77. The issue is a reversible one-way hash that may allow a privileged user to escalate privileges, cause a DoS, or disclose information via local access. Intel (and Lenovo/HP advisories) indicate updates are availab...

CVE-2020-0533

Reversible one-way hash in IntelR CSME versions before 11.8.76, 11.12.77 and 11.22.77 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access...

CVE-2020-0534

Improper input validation in the DAL subsystem for IntelR CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2020-0534

CVE-2020-0534: Intel CSME DAL subsystem has improper input validation in CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12, which may allow an unauthenticated user to cause denial of service over network access. Connected sources (Intel INTEL-SA-00295 advisory, NVD entry, and Lenovo/HP a...

CVE-2020-0542

Improper buffer restrictions in subsystem for IntelR CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access...

CVE-2020-0542

CVE-2020-0542 concerns Intel CSME: Improper buffer restrictions in the subsystem affect Intel CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12, potentially enabling escalation of privileges, information disclosure, or denial of service via local access for authenticated users. Connected...

CVE-2020-8336

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash...

Format string

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash...

CVE-2020-8336

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash...

CVE-2020-8336

CVE-2020-8336 affects Lenovo ThinkPad models where Intel CSME Anti-rollback ARB protections were implemented to prevent rollback of CSME firmware in flash. The Connected documents indicate this is a firmware/boot- firmware protection mechanism, not a software vulnerability in user-space, and the ...

Multi-vendor BIOS Security Vulnerabilities (June 2020) - Lenovo Support US

No description provided...

Intel® CSME, Intel® SPS, Intel® TXE, Intel® DAL, and Intel® AMT 2019.1 QSR Advisory

Summary: Multiple potential security vulnerabilities in Intel® Converged Security & Management Engine Intel® CSME, Intel® Server Platform Services Intel® SPS, Intel® Trusted Execution Engine Interface Intel® TXE, Intel® Dynamic Application Loader Intel® DAL, and Intel® Active Management Technolog...

This Unpatchable Flaw Affects All Intel CPUs Released in Last 5 Years

All Intel processors released in the past 5 years contain an unpatchable vulnerability that could allow hackers to compromise almost every hardware-enabled security technology that are otherwise designed to shield sensitive data of users even when a system gets compromised. The vulnerability,...

CVE-2019-14598

Improper Authentication in subsystem in IntelR CSME versions 12.0 through 12.0.48 IOT only: 12.0.56, versions 13.0 through 13.0.20, versions 14.0 through 14.0.10 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access...