CVE-2018-12199

Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before 3.1.60 or 4.0.10 may allow a privileged user to potentially execute arbitrary code via physical access...

Input validation

Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially modify data via physical access...

Authentication flaw

Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or IntelR Server Platform Services before version SPSE504.00.04.393.0 may allow an unauthenticated user to potentially bypass MEBx authentication via physical access...

Code injection

Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access...

Input validation

Insufficient input validation in Intelr CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intelr TXE before 3.1.60 or 4.0.10 may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2018-12189

The CVE-2018-12189 issue affects Intel CSME (and related TXE) with an unhandled exception in the Content Protection subsystem that may allow a privileged local user to modify data. Affected firmware ranges include CSME pre-11.8.60 / 11.11.60 / 11.22.60 / 12.0.20 and TXE before 3.1.60 or 4.0.10. I...

CVE-2018-12190

Insufficient input validation in Intelr CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intelr TXE before 3.1.60 or 4.0.10 may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2018-12191

Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or IntelR Server Platform Services before versions 4.00.04.383 or SPS 4.01.02.174, or IntelR TXE before versions 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially execute arbitrar...

CVE-2018-12192

Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or IntelR Server Platform Services before version SPSE504.00.04.393.0 may allow an unauthenticated user to potentially bypass MEBx authentication via physical access...

CVE-2018-12189

Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access...

CVE-2018-12188

CVE-2018-12188: In Intel CSME (and related TXE/AMS components) there is insufficient input validation prior to specific firmware versions (CSME <11.8.60/11.11.60/11.22.60/12.0.20; TXE

CVE-2018-12208

Buffer overflow in HECI subsystem in IntelR CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and IntelR TXE version before 3.1.60 or 4.0.10, or IntelR Server Platform Services before version 5.00.04.012 may allow an unauthenticated user to potentially execute arbitrary code via physica...

CVE-2018-12208

Intel CVE-2018-12208 is a buffer overflow in the HECI subsystem affecting Intel CSME, TXE, and SPS prior to specified fixed versions. The Intel advisory INTEL-SA-00185 documents the issue, listing affected products and firmware families (CSME before 11.8.60/11.11.60/11.22.60 or 12.0.20; TXE befor...

HPSBHF03607 rev. 3 - Intel CSME, Trusted Execution Engine (TXE), Active Management Technology (AMT) Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with Intel® CSME, Server Platform Services, Trusted...

CVE-2018-3655

A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access...

CVE-2018-3657

CVE-2018-3657 affects Intel AMT in Intel CSME firmware prior to 12.0.5, enabling a local attacker with high privileges to potentially execute arbitrary code with AMT execution rights via local access. The issue is described across multiple sources (NVD entry and related advisories) with a CVSSv3 ...

CVE-2018-3659

CVE-2018-3659 affects Intel PTT in Intel CSME firmware prior to 12.0.5 and TXE firmware prior to 4.0, allowing potential information disclosure with physical access. Affected products include Intel CSME and TXE implementations; root cause is in the PTT module itself. Mitigation is to update to th...