PT-2019-1670

Name of the Vulnerable Software and Affected Versions IntelR CSME versions prior to 11.8.60 IntelR CSME versions prior to 11.11.60 IntelR CSME versions prior to 11.22.60 IntelR CSME versions prior to 12.0.20 Description The issue is related to insufficient input validation in IntelR AMT in IntelR...

PT-2019-1625

Name of the Vulnerable Software and Affected Versions Intel CSME versions prior to 11.8.60 Intel CSME versions prior to 11.11.60 Intel CSME versions prior to 11.22.60 Intel CSME versions prior to 12.0.20 Intel TXE versions prior to 3.1.60 Intel TXE versions prior to 4.0.10 Description The issue i...

PT-2019-1624

Name of the Vulnerable Software and Affected Versions Intel CSME versions prior to 11.8.60 Intel CSME versions prior to 11.11.60 Intel CSME versions prior to 11.22.60 Intel CSME versions prior to 12.0.20 Intel TXE versions prior to 3.1.60 Intel TXE versions prior to 4.0.10 Description The issue i...

PT-2019-1667

Name of the Vulnerable Software and Affected Versions Intel CSME versions prior to 11.8.60, 11.11.60, 11.22.60 or 12.0.20 Intel TXE versions prior to 3.1.60 or 4.0.10 Description The issue is related to insufficient input validation in Intel Converged Security and Manageability Engine and Trusted...

PT-2019-1671

Name of the Vulnerable Software and Affected Versions IntelR CSME versions prior to 11.8.60 IntelR CSME versions prior to 11.11.60 IntelR CSME versions prior to 11.22.60 IntelR CSME versions prior to 12.0.20 Description The issue is related to insufficient input validation in IntelR AMT, which ma...

PT-2019-1630

Name of the Vulnerable Software and Affected Versions IntelR CSME versions prior to 11.8.60, 11.11.60, 11.22.60 or 12.0.20 IntelR TXE versions prior to 3.1.60 or 4.0.10 IntelR Server Platform Services versions prior to 5.00.04.012 Description The issue is related to a buffer overflow in the HECI...

HPSBHF03607 rev. 3 - Intel CSME, Trusted Execution Engine (TXE), Active Management Technology (AMT) Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with Intel® CSME, Server Platform Services, Trusted...

PT-2019-1627

Name of the Vulnerable Software and Affected Versions Intel CSME versions prior to 11.8.60 Intel CSME versions prior to 11.11.60 Intel CSME versions prior to 11.22.60 Intel CSME versions prior to 12.0.20 Intel Server Platform Services versions prior to SPS E5 04.00.04.393.0 Description The issue ...

2019.2 IPU – Intel® CSME, Intel® SPS, Intel® TXE, Intel® AMT, Intel® PTT and Intel® DAL Advisory

Summary: Potential security vulnerabilities in Intel® Converged Security and Manageability Engine CSME, Intel® Server Platform Services SPS, Intel® Trusted Execution Engine TXE, Intel® Active Management Technology AMT, Intel® Platform Trust Technology PTT and Intel® Dynamic Application Loader DAL...

Power Management Controller (PMC) Security Advisory

Summary: A potential security vulnerability in power management controller firmware may allow escalation of privilege and/ or information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2018-3643 Description: A vulnerabili...

Intel CSME / SPS and TXE Vulnerabilities - Lenovo Support US

No description provided...

Intel CSME / SPS and TXE Vulnerabilities - US

Lenovo Security Advisory: LEN-22810 Potential Impact: Elevation of privilege, information disclosure, denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3655, CVE-2018-3657, CVE-2018-3658, CVE-2018-3659, CVE-2018-3616 Summary Description: Intel has disclosed...

CVE-2018-3658

Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access...

CVE-2018-3655

A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access...

CVE-2018-3657

Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access...

CVE-2018-3658

Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access...

CVE-2018-3655

A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access...

Design/Logic Flaw

A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access...

Code injection

A vulnerability in Power Management Controller firmware in systems using specific IntelR Converged Security and Management Engine CSME before version 11.8.55, 11.11.55, 11.21.55, 12.0.6 or IntelR Server Platform Services firmware before version 4.x.04 may allow an attacker with administrative...

CVE-2018-3659

CVE-2018-3659 affects Intel PTT in Intel CSME firmware prior to 12.0.5 and TXE firmware prior to 4.0, allowing potential information disclosure with physical access. Affected products include Intel CSME and TXE implementations; root cause is in the PTT module itself. Mitigation is to update to th...