CVE-2018-3632

CVE-2018-3632 describes memory corruption in Intel Active Management Technology (AMT) within the Intel Converged Security and Manageability Engine (CSME) firmware, affecting versions 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x (including 11.0, 11.5, 11.6, 11.7, 11.10, 11.20). An attacker with local admini...

PT-2018-1389

Name of the Vulnerable Software and Affected Versions Intel Converged Security Manageability Engine Firmware versions 3.x through 11.x Description The issue is caused by a buffer overflow in the HTTP handler of the Active Management Technology subsystem in the Intel Converged Security Manageabili...

PT-2018-16103

Name of the Vulnerable Software and Affected Versions Intel Converged Security Manageability Engine Firmware versions 3.x through 11.x Description A buffer overflow issue exists in the event handler of Intel Active Management Technology, potentially allowing an attacker to cause a denial of servi...

CVE-2018-3632: Out-of-bounds Write

Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x / 7.x / 8.x / 9.x / 10.x / 11.0 / 11.5 / 11.6 / 11.7 / 11.10 / 11.20 could be triggered by an attacker with local administrator permission on the system...

CVE-2018-3628: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to execute arbitrary code via the same subnet...

CVE-2018-3629: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to cause a denial of service via the same subnet...

Design/Logic Flaw

Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process to access privileged content via unspecified vector...

Buffer overflow

Multiple buffer overflows in Active Management Technology AMT in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code with AMT execution privilege...

CVE-2017-5708

Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process to access privileged content via unspecified vector...

CVE-2017-5705

Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code...

CVE-2017-5705

Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code...

CVE-2017-5708

Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process to access privileged content via unspecified vector...

CVE-2017-5708

Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process to access privileged content via unspecified vector...

CVE-2017-5708

CVE-2017-5708 involves privilege escalations in Intel Manageability Engine Firmware (ME) 11.0/11.5/11.6/11.7/11.10/11.20. An unauthorized process may access privileged content via an unspecified vector. Affected components: ME firmware (and related SPS/TXE stack per Intel-SA-00086). Impact is def...

CVE-2017-5705

Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code...

CVE-2017-5711: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Active Management Technology AMT in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code with AMT execution privilege...

CVE-2017-5705: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code...

CVE-2017-5708: Undefined Security Weakness

Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process to access privileged content via unspecified vector...

CVE-2017-5712: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Active Management Technology AMT in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access to the system to execute arbitrary code with AMT execution privilege...

PT-2017-3129

Name of the Vulnerable Software and Affected Versions Intel Manageability Engine Firmware versions 11.0 through 11.20 Description The issue concerns multiple privilege escalations in the kernel of Intel Manageability Engine Firmware, allowing unauthorized processes to access privileged content...