CVE-2020-0536

Improper input validation in the DAL subsystem for IntelR CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and IntelR TXE versions before 3.1.75 and 4.0.25 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2020-0541

CVE-2020-0541 describes an out-of-bounds write in the Intel® CSME subsystem. Affected versions are Intel CSME before 12.0.64, 13.0.32, 14.0.33 and 14.5.12, which may allow a privileged user to escalate privileges via local access. The vulnerability is part of Intel’s broader INTEL-SA-00295 set of...

CVE-2020-0533

CVE-2020-0533 affects Intel CSME in versions before 11.8.76, 11.12.77, and 11.22.77. The issue is a reversible one-way hash that may allow a privileged user to escalate privileges, cause a DoS, or disclose information via local access. Intel (and Lenovo/HP advisories) indicate updates are availab...

CVE-2020-0533

Reversible one-way hash in IntelR CSME versions before 11.8.76, 11.12.77 and 11.22.77 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access...

CVE-2020-0534

CVE-2020-0534: Intel CSME DAL subsystem has improper input validation in CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12, which may allow an unauthenticated user to cause denial of service over network access. Connected sources (Intel INTEL-SA-00295 advisory, NVD entry, and Lenovo/HP a...

CVE-2020-0534

Improper input validation in the DAL subsystem for IntelR CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2020-0542

CVE-2020-0542 concerns Intel CSME: Improper buffer restrictions in the subsystem affect Intel CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12, potentially enabling escalation of privileges, information disclosure, or denial of service via local access for authenticated users. Connected...

CVE-2020-0542

Improper buffer restrictions in subsystem for IntelR CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access...

CVE-2020-8336

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash...

Format string

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash...

CVE-2020-8336

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash...

CVE-2020-8336

CVE-2020-8336 affects Lenovo ThinkPad models where Intel CSME Anti-rollback ARB protections were implemented to prevent rollback of CSME firmware in flash. The Connected documents indicate this is a firmware/boot- firmware protection mechanism, not a software vulnerability in user-space, and the ...

Multi-vendor BIOS Security Vulnerabilities (June 2020) - Lenovo Support US

No description provided...

Intel® CSME, Intel® SPS, Intel® TXE, Intel® DAL, and Intel® AMT 2019.1 QSR Advisory

Summary: Multiple potential security vulnerabilities in Intel® Converged Security & Management Engine Intel® CSME, Intel® Server Platform Services Intel® SPS, Intel® Trusted Execution Engine Interface Intel® TXE, Intel® Dynamic Application Loader Intel® DAL, and Intel® Active Management Technolog...

This Unpatchable Flaw Affects All Intel CPUs Released in Last 5 Years

All Intel processors released in the past 5 years contain an unpatchable vulnerability that could allow hackers to compromise almost every hardware-enabled security technology that are otherwise designed to shield sensitive data of users even when a system gets compromised. The vulnerability,...

CVE-2019-14598

Improper Authentication in subsystem in IntelR CSME versions 12.0 through 12.0.48 IOT only: 12.0.56, versions 13.0 through 13.0.20, versions 14.0 through 14.0.10 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access...

Authentication flaw

Improper Authentication in subsystem in IntelR CSME versions 12.0 through 12.0.48 IOT only: 12.0.56, versions 13.0 through 13.0.20, versions 14.0 through 14.0.10 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access...

CVE-2019-14598

CVE-2019-14598 describes an Improper Authentication issue in Intel CSME subsystems that could allow a locally authenticated attacker to escalate privileges, cause denial of service, or disclose information. Affected firmware ranges include 12.x (12.0–12.0.48; IoT 12.0.56), 13.x (up to 13.0.20), a...

CVE-2019-14598

Improper Authentication in subsystem in IntelR CSME versions 12.0 through 12.0.48 IOT only: 12.0.56, versions 13.0 through 13.0.20, versions 14.0 through 14.0.10 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access...

Intel Patches High-Severity Flaw in Security Engine

Intel is warning of a high-severity flaw in the firmware of its converged security and management engine CSME, which if exploited could allow privilege escalation, denial of service and information disclosure. CSME powers Intel’s Active Management System hardware and firmware technology, used for...