Input validation

Insufficient input validation in the subsystem for IntelR CSME before versions 11.8.70, 12.0.45 and 13.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access...

Input validation

Insufficient input validation in MEInfo software for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Insufficient session validation in the subsystem for IntelR CSME before versions 11.8.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access...

Input validation

Insufficient Input validation in the subsystem for IntelR CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a privileged user to potentially enable denial of service via local access...

CVE-2019-11108

CVE-2019-11108 affects Intel CSME subsystem before 12.0.45 and 13.0.10, enabling local privilege escalation. Affected components include Intel CSME/AMT/TXE (and related firmware tooling); exploitation is local. Remediation: upgrade to Intel CSME 12.0.45 or newer or 13.0.10 or newer (per Intel/EU/...

CVE-2019-11110

Authentication bypass in the subsystem for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-11110

CVE-2019-11110 is an authentication bypass affecting Intel CSME and TXE subsystems. Public sources (Intel advisory and Red Hat/Lenovo summaries) describe: Affects Intel CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10, 14.0.10 and Intel TXE before versions 3.1.70 and 4.0.20. Pri...

CVE-2019-11106

CVE-2019-11106 affects Intel CSME, TXE, AMT and related components. The issue is insufficient session validation in Intel CSME subsystems (and related TXE/AMT subsystems), potentially allowing a local attacker to escalate privileges. Affects CSME versions prior to 11.8.70, 12.0.45, 13.0.10 and 14...

CVE-2019-11106

Insufficient session validation in the subsystem for IntelR CSME before versions 11.8.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-11102

CVE-2019-11102 involves insufficient input validation in Intel DAL software for Intel CSME/AMT/TXE; a privileged/local attacker could potentially trigger information disclosure. Affected products span Intel CSME, Intel AMT, Intel TXE, and Intel DAL, with vulnerable Intel CSME/TXE/DAL versions pri...

CVE-2019-11101

CVE-2019-11101 involves insufficient input validation in the Intel CSME and TXE subsystems (and related AMT/DAL components). Affected are Intel CSME before 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10, 14.0.10 and Intel TXE before 3.1.70 and 4.0.20. The issue may allow a privileged user to discl...

CVE-2019-11101

Insufficient input validation in the subsystem for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2019-11087

Insufficient input validation in the subsystem for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege, information disclosure or denial of...

CVE-2019-11087

This CVE affects Intel CSME, AMT, SPS, TXE and related DAL components. Root cause: insufficient input validation in the Intel CSME/TXE subsystems. Affected versions include Intel CSME before 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel TXE before 3.1.70 and 4.0.20. Conditions ...

CVE-2019-0168

CVE-2019-0168 affects Intel CSME and TXE subsystems (also involving AMT/SPS/DAL) due to insufficient input validation in the subsystem. The issue potentially allows a privileged user to escalate privileges or disclose information via local access. Fixes exist: Intel/partners list updated firmware...

CVE-2019-0168

Insufficient input validation in the subsystem for IntelR CSME before versions 11.8.70, 12.0.45 and 13.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2019-0165

CVE-2019-0165 concerns Intel CSME: Insufficient input validation in the subsystem before versions 12.0.45, 13.0.10, and 14.0.10 may allow a privileged user to potentially trigger a denial of service via local access. Connected sources corroborate this behavior across Intel CSME/AMT/SPS/TXE/DAL co...

CVE-2019-0165

Insufficient Input validation in the subsystem for IntelR CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a privileged user to potentially enable denial of service via local access...

CVE-2019-11103

Insufficient input validation in firmware update software for IntelR CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-11103

CVE-2019-11103 involves insufficient input validation in Intel CSME firmware/update software. The issue can let an authenticated, locally located user potentially escalate privileges via the firmware/update subsystem. Affected are Intel CSME/AMT/DAL components with vulnerable firmware before 12.0...