Authentication flaw

Authentication bypass in the subsystem for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access...

Input validation

Insufficient input validation in the subsystem for IntelR CSME before versions 11.8.70, 12.0.45 and 13.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access...

Input validation

Insufficient input validation in MEInfo software for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Heap overflow in subsystem in IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; IntelR TXE before versions 3.1.70 and 4.0.20 may allow an unauthenticated user to potentially enable escalation of privileges, information disclosure or denial of service via adjacent access...

Information disclosure

Logic issue in subsystem for IntelR CSME before versions 12.0.45, 13.0.10 and 14.0.10 may allow a privileged user to potentially enable escalation of privilege and information disclosure via local access...

Input validation

Insufficient input validation in the subsystem for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege, information disclosure or denial of...

Input validation

Insufficient input validation in IntelR DAL software for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access...

Input validation

Insufficient Input validation in the subsystem for IntelR CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a privileged user to potentially enable denial of service via local access...

CVE-2019-11108

CVE-2019-11108 affects Intel CSME subsystem before 12.0.45 and 13.0.10, enabling local privilege escalation. Affected components include Intel CSME/AMT/TXE (and related firmware tooling); exploitation is local. Remediation: upgrade to Intel CSME 12.0.45 or newer or 13.0.10 or newer (per Intel/EU/...

CVE-2019-11110

CVE-2019-11110 is an authentication bypass affecting Intel CSME and TXE subsystems. Public sources (Intel advisory and Red Hat/Lenovo summaries) describe: Affects Intel CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10, 14.0.10 and Intel TXE before versions 3.1.70 and 4.0.20. Pri...

CVE-2019-11110

Authentication bypass in the subsystem for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-11106

CVE-2019-11106 affects Intel CSME, TXE, AMT and related components. The issue is insufficient session validation in Intel CSME subsystems (and related TXE/AMT subsystems), potentially allowing a local attacker to escalate privileges. Affects CSME versions prior to 11.8.70, 12.0.45, 13.0.10 and 14...

CVE-2019-11106

Insufficient session validation in the subsystem for IntelR CSME before versions 11.8.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-11102

CVE-2019-11102 involves insufficient input validation in Intel DAL software for Intel CSME/AMT/TXE; a privileged/local attacker could potentially trigger information disclosure. Affected products span Intel CSME, Intel AMT, Intel TXE, and Intel DAL, with vulnerable Intel CSME/TXE/DAL versions pri...

CVE-2019-11101

CVE-2019-11101 involves insufficient input validation in the Intel CSME and TXE subsystems (and related AMT/DAL components). Affected are Intel CSME before 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10, 14.0.10 and Intel TXE before 3.1.70 and 4.0.20. The issue may allow a privileged user to discl...

CVE-2019-11101

Insufficient input validation in the subsystem for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2019-11087

This CVE affects Intel CSME, AMT, SPS, TXE and related DAL components. Root cause: insufficient input validation in the Intel CSME/TXE subsystems. Affected versions include Intel CSME before 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel TXE before 3.1.70 and 4.0.20. Conditions ...

CVE-2019-11087

Insufficient input validation in the subsystem for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege, information disclosure or denial of...

CVE-2019-0168

Insufficient input validation in the subsystem for IntelR CSME before versions 11.8.70, 12.0.45 and 13.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2019-0168

CVE-2019-0168 affects Intel CSME and TXE subsystems (also involving AMT/SPS/DAL) due to insufficient input validation in the subsystem. The issue potentially allows a privileged user to escalate privileges or disclose information via local access. Fixes exist: Intel/partners list updated firmware...