375 matches found
CVE-2019-0165
CVE-2019-0165 concerns Intel CSME: Insufficient input validation in the subsystem before versions 12.0.45, 13.0.10, and 14.0.10 may allow a privileged user to potentially trigger a denial of service via local access. Connected sources corroborate this behavior across Intel CSME/AMT/SPS/TXE/DAL co...
CVE-2019-0165
Insufficient Input validation in the subsystem for IntelR CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a privileged user to potentially enable denial of service via local access...
CVE-2019-11103
Insufficient input validation in firmware update software for IntelR CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2019-11103
CVE-2019-11103 involves insufficient input validation in Intel CSME firmware/update software. The issue can let an authenticated, locally located user potentially escalate privileges via the firmware/update subsystem. Affected are Intel CSME/AMT/DAL components with vulnerable firmware before 12.0...
CVE-2019-11104
Insufficient input validation in MEInfo software for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2019-11105
Logic issue in subsystem for IntelR CSME before versions 12.0.45, 13.0.10 and 14.0.10 may allow a privileged user to potentially enable escalation of privilege and information disclosure via local access...
CVE-2019-11105
CVE-2019-11105 describes a logic issue in the Intel CSME subsystem that may allow a privileged local attacker to escalate privileges and disclose information on affected systems. Affected are Intel CSME before versions 12.0.45, 13.0.10, and 14.0.10. The Red Hat and CVE ecosystems corroborate a lo...
CVE-2019-11147
CVE-2019-11147 involvesInsufficient access control in the Intel CSME hardware abstraction driver (MEInfo) and related TXE/Detection Tool components, potentially allowing an authenticated user to escalate privileges via local access. Red Hat and CVE records describe the same issue and list affecte...
CVE-2019-0169
CVE-2019-0169 is a hardware/firmware vulnerability affecting Intel CSME and TXE subsystems (and related Intel AMT/SPS/DAL components). The issue is a heap overflow in the CSME/TXE subsystems that may allow an unauthenticated user to escalate privileges, disclose information, or cause a denial of ...
Intel Warns of Critical Info-Disclosure Bug in Security Engine
A critical security bug in the Intel Converged Security and Manageability Engine CSME could allow escalation of privilege, denial of service or information disclosure. The details are included in a bug advisory that in total covers 77 vulnerabilities, 67 of which were found by internal Intel staf...
Intel Releases Security Updates
Intel has released security updates to address vulnerabilities in multiple products. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the following Intel advisories and apply the necessary updates: BMC Advisory INTEL-SA-00313 UEFI Advisory...
HPSBHF03637 rev. 3 - Intel 2019.2 IPU CSME SPS TXE AMT Security Updates
Potential Security Impact Escalation of Privilege, Denial of Service, or Information Disclosure Source: Intel, HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Multiple security vulnerabilities have been identified by Intel. Intel is releasing updates for Intel®...
Intel CSME, Server Platform Services, Trusted Execution Engine, Intel Active Management Technology and Dynamic Application Loader Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-27716 Potential Impact: Privilege escalation, denial of service, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0131, CVE-2019-0165, CVE-2019-0166, CVE-2019-0168, CVE-2019-0169, CVE-2019-11086, CVE-2019-11087,...
Intel CSME, Server Platform Services, Trusted Execution Engine, Intel Active Management Technology and Dynamic Application Loader Vulnerabilities - Lenovo Support US
No description provided...
Input validation
Insufficient input validation in HECI subsystem in IntelR CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Intel® Trusted Execution Engine Firmware before version 3.1.55 may allow a privileged user to potentially enable escalation of privileges via local access...
CVE-2018-12147
Insufficient input validation in HECI subsystem in IntelR CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Intel® Trusted Execution Engine Firmware before version 3.1.55 may allow a privileged user to potentially enable escalation of privileges via local access...
CVE-2018-12147
CVE-2018-12147 affects Intel CSME (HECI) subsystem, Intel SPS, and TXE firmware. The issue is insufficient input validation that may allow a privileged user to escalate local privileges. Vulnerable states are Intel CSME before 11.21.55, SPS before 4.0 (Purley/Bakerville), and TXE firmware before ...
Intel® CSME Assets Advisory
Summary: A potential security vulnerability in Intel® CSME, Intel® Server Platform Services and Intel® Trusted Execution Engine Firmware may allow information disclosure. Intel is releasing Intel® CSME, Intel® Server Platform Services and Intel® Trusted Execution Engine updates to mitigate this...
Intel Fixes Critical, High-Severity Flaws Across Several Products
Intel has issued an updated advisory for more than 30 fixes addressing vulnerabilities across various products – including a critical flaw in Intel’s converged security and management engine CSME that could enable privilege-escalation. The bug CVE-2019-0153 exists in a subsystem of Intel CSME,...
