CVE-2023-31361

A DLL hijacking vulnerability in AMD Integrated Management Technology AIM-T Manageability Service could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

PT-2025-6384 · Amd · Amd Integrated Management Technology (Aim-T) Manageability Service

Name of the Vulnerable Software and Affected Versions: AMD Integrated Management Technology AIM-T Manageability Service affected versions not specified Description: The issue is related to incorrect default permissions in the installation directory of the AMD Integrated Management Technology AIM-...

AMD Integrated Management Technology 安全漏洞

AMD Integrated Management Technology is a management technology from Ultraviolet Semiconductor AMD that is primarily used to enable AMD DASH management features on AMD PRO hardware. A security vulnerability exists in AMD Integrated Management Technology that stems from incorrect default permissio...

AMD Integrated Management Technology 安全漏洞

AMD Integrated Management Technology is a management technology from UltraMicroelectronics AMD that is primarily used to enable AMD DASH management features on AMD PRO hardware. A security vulnerability exists in AMD Integrated Management Technology that stems from a DLL hijacking vulnerability i...

PT-2025-6385 · Amd · Amd Integrated Management Technology (Aim-T) Manageability Service

Name of the Vulnerable Software and Affected Versions: AMD Integrated Management Technology AIM-T Manageability Service affected versions not specified Description: A DLL hijacking issue in the Manageability Service could allow an attacker to achieve privilege escalation, potentially resulting in...

AIM-T Manageability Service Vulnerabilities

AMD ID: AMD-SB-9012 Potential Impact: Arbitrary Code Execution Severity: High Summary A researcher reported incorrect default permissions and Dynamic Link Library DLL hijacking vulnerabilities within AMD Integrated Management Technology AIM-T. AIM-T is designed to enable AMD Desktop and mobile...

CVE-2022-29887

Cross-site Scripting XSS in some IntelR Manageability Commander software before version 2.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

The vulnerability of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine (CSME) arises from improper initialization of resources, allowing attackers to disclose protected information.

The vulnerability of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine CSME is related to improper initialization of resources. Exploiting this vulnerability can allow attackers to disclose protected information...

CVE-2024-21939

Incorrect default permissions in the AMD Cloud Manageability Service ACMS Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21939

Incorrect default permissions in the AMD Cloud Manageability Service ACMS Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21939

CVE-2024-21939 concerns the AMD Cloud Manageability Service (ACMS). The connected AMD advisory documents indicate the issue stems from incorrect default ACL permissions in the ACMS Software installation directory, enabling a low-privileged local attacker to escalate privileges and potentially exe...

CVE-2024-21939

Incorrect default permissions in the AMD Cloud Manageability Service ACMS Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

PT-2024-19122 · Amd · Amd Cloud Manageability Service

Name of the Vulnerable Software and Affected Versions: AMD Cloud Manageability Service ACMS Software affected versions not specified Description: The issue is related to incorrect default permissions in the installation directory of the AMD Cloud Manageability Service ACMS Software. This could...

AMD Cloud Manageability Service 安全漏洞

AMD Cloud Manageability Service is a software product within the AMD Manageability solution from UltraMicroelectronics AMD that enables IT administrators to manage AMD devices that are not on the corporate network. AMD Cloud Manageability Service has a security vulnerability that stems from...

AMD Cloud Manageability Service Incorrect Default Permissions Vulnerability

Bulletin ID: AMD-SB-9006 Potential Impact: Incorrect Default Permissions Leading to Arbitrary Execution Severity: High Summary A researcher reported an incorrect default permissions vulnerability within the AMD Cloud Manageability Service ACMS Software. ACMS is designed to help enable IT...

CVE-2023-38655

CVE-2023-38655 concerns improper buffer restrictions in firmware for Intel® AMT and Intel® Standard Manageability. The vulnerability could allow a privileged attacker to cause a denial of service over the network. Connected sources corroborate the issue within Intel chipset firmware/CSME/AMT ecos...

PT-2024-7103 · Intel · Intel Csme

Name of the Vulnerable Software and Affected Versions: IntelR CSME affected versions not specified Description: The issue is related to an unchecked return value in the firmware of some Intel Converged Security and Manageability Engine CSME subsystems. This may allow an unauthenticated user with...

PT-2024-7105 · Intel · Intel Converged Security/Manageability Engine

Name of the Vulnerable Software and Affected Versions: Intel Converged Security and Manageability Engine CSME affected versions not specified Description: The issue is related to insufficient input validation in the Intel Converged Security and Manageability Engine CSME firmware, which may allow ...

UBUNTU-CVE-2022-37341

Improper access control in some IntelR Ethernet Adapters and IntelR Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2024-11602 · Intel · Intel Ethernet Adapters +1

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Adapters and IntelR Ethernet Controller I225 Manageability firmware affected versions not specified Description: The issue is related to improper access control in the firmware of certain Intel Ethernet Adapters and Intel...