Lucene search
+L

318 matches found

Lenovo
Lenovo
added 2020/06/04 8:27 p.m.209 views

Intel CSME, SPS, TXE, AMT and DAL Advisory - Lenovo Support US

Lenovo Security Advisory: LEN-30041 Potential Impact: Privilege escalation, denial of service, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0542, CVE-2020-0532, CVE-2020-0538, CVE-2020-0534, CVE-2020-0541, CVE-2020-0533, CVE-2020-0537, CVE-2020-053...

7.5CVSS0.7AI score0.18564EPSS
Exploits3
Lenovo
Lenovo
added 2020/06/04 8:27 p.m.44 views

Intel CSME, SPS, TXE, AMT and DAL Advisory - Lenovo Support US

No description provided...

7.8CVSS6.1AI score0.00396EPSS
Exploits0
Intel
Intel
added 2020/03/17 12:0 a.m.49 views

Intel Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability Escalation of Privilege

Summary: There is an escalation of privilege vulnerability in Intel® Active Management Technology AMT, Intel® Standard Manageability ISM, and Intel® Small Business Technology versions firmware versions 6.x, 7.x, 8.x 9.x, 10.x, 11.0, 11.5, and 11.6 that can allow an unprivileged attacker to gain...

10CVSS8AI score0.92189EPSS
Exploits7
BDU FSTEC
BDU FSTEC
added 2020/01/20 12:0 a.m.6 views

The vulnerability of Intel Converged Security and Manageability Engine (CSME) software, which stems from insufficient validation of input data, allows attackers to escalate their privileges.

The vulnerability of Intel Converged Security and Manageability Engine CSME lies in insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

2.3CVSS6.9AI score0.00353EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.10 views

The vulnerability of the MEinfo utility in Intel’s Converged Security and Manageability Engine (CSME) and Intel’s Trusted Execution Engine (TXE) allows a attacker to enhance their privileges.

The vulnerability of the MEinfo utility in Intel’s Converged Security and Manageability Engine CSME and Intel’s Trusted Execution Engine TXE software exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.3CVSS7.4AI score0.00355EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.10 views

The vulnerability of Intel Converged Security and Manageability Engine’s microprogramming software arises from insufficient validation of input data. This allows attackers to escalate their privileges.

The vulnerability of Intel Converged Security and Manageability Engine CSME exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.3CVSS7.3AI score0.00355EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.7 views

The vulnerability of Intel Converged Security and Manageability Engine (CSME) software, which stems from insufficient validation of input data, allows attackers to trigger a service failure.

The vulnerability of Intel Converged Security and Manageability Engine CSME is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to trigger a service failure...

4.6CVSS6.5AI score0.00309EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.6 views

The vulnerability of Microprogramming Software, Intel Converged Security and Manageability Engine (CSME), and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

4.6CVSS6.5AI score0.00346EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.6 views

The vulnerability of Microprogramming Software, Intel Converged Security and Manageability Engine (CSME), and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

6.2CVSS6.5AI score0.00349EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.6 views

The vulnerability of Microprogramming Software: Intel Converged Security and Manageability Engine (CSME), Intel Trusted Execution Engine (TXE), and Intel Dynamic Application Loader (DAL) is related to authentication errors, allowing attackers to escalate their privileges.

The vulnerabilities of Microprogramming Software: Intel Converged Security and Manageability Engine CSME, Intel Trusted Execution Engine TXE, and Intel Dynamic Application Loader DAL are related to authentication errors. Exploiting these vulnerabilities can allow attackers to enhance their...

4.1CVSS7AI score0.00366EPSS
Exploits0References2Affected Software2
Microsoft Secure
Microsoft Secure
added 2019/07/01 4:25 p.m.55 views

Delivering major enhancements in Windows Defender Application Control with the Windows 10 May 2019 Update

With the Windows 10 May 2019 Update we delivered several important features for Windows Defender Application Control WDAC, which was originally introduced to Windows as part of a scenario called Device Guard. WDAC works in conjunction with features like Windows Defender Application Guard, which...

7.5AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.6 views

Vulnerability in the Intel Converged Security and Manageability Engine microprogramming subsystem, related to buffer overflow attacks, allows attackers to escalate their privileges.

The vulnerability in the Intel Converged Security and Manageability Engine CSME microprogramming subsystem is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...

9CVSS8.1AI score0.01864EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.10 views

Vulnerability in the subsystems of Microprogramming Software: Intel Converged Security and Manageability Engine, Intel Server Platform Services, and Intel Trusted Execution Engine (TXE). This vulnerability is related to lack of access control, allowing attackers to enhance their privileges.

The vulnerability in the microprogramming system components of the Intel Converged Security and Manageability Engine, Intel Server Platform Services, and Intel Trusted Execution Engine TXE is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance thei...

7.1CVSS7.8AI score0.00362EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/03/29 12:0 a.m.7 views

The vulnerability of the Intel Converged Security and Manageability Engine implementation, which stems from insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Intel Converged Security and Manageability Engine implementation is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code...

7.1CVSS7.2AI score0.00397EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/03/29 12:0 a.m.6 views

The vulnerabilities of Intel Converged Security and Manageability Engine and Trusted Execution Engine implementations allow attackers to gain access to protected information due to insufficient validation of input data.

The vulnerability of Intel Converged Security and Manageability Engine and Trusted Execution Engine implementations is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain access to protected information...

6.8CVSS5.8AI score0.00336EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/03/29 12:0 a.m.5 views

The vulnerability of the Intel Converged Security and Manageability Engine implementation lies in insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Intel Converged Security and Manageability Engine implementation is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code...

6.7CVSS7.1AI score0.00424EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/03/27 12:0 a.m.6 views

The vulnerability of the HECI subsystem of the microprogramming software, Intel Converged Security and Manageability Engine, Intel Trusted Execution Engine, and Intel Server Platform Services allows a perpetrator to execute arbitrary code.

The vulnerability of Microprogramming Software, including Intel Converged Security and Manageability Engine CSME, Intel Trusted Execution Engine TXE, and Intel Server Platform Services SPS, is related to the execution of operations outside of the buffer in memory. Exploitation of this vulnerabili...

7.1CVSS8AI score0.00511EPSS
Exploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/03/27 12:0 a.m.5 views

The vulnerability of the Microprogrammable Software-based Intel Converged Security and Manageability Engine and Intel Server Platform Services, related to authentication process flaws (logical errors), allows attackers to bypass the MEBx authentication process.

The vulnerability of the Microprogrammable Software-based Intel Converged Security and Manageability Engine CSME and Intel Server Platform Services SPS is related to deficiencies in the authentication process logical error. Exploiting this vulnerability could allow a perpetrator to bypass the MEB...

6.9CVSS6.8AI score0.00467EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/03/27 12:0 a.m.8 views

The vulnerabilities of Intel Converged Security and Manageability Engine and Intel Trusted Execution Engine involve insufficient input data validation, allowing attackers to execute arbitrary code.

The vulnerability of the Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient validation of input data. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

8.2CVSS7.2AI score0.00381EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/03/27 12:0 a.m.5 views

The vulnerability of microprogramming software such as Intel Converged Security and Manageability Engine, Intel Trusted Execution Engine, and Intel Server Platform Services arises from the execution of operations outside of the buffer in memory. This allows attackers to execute arbitrary code.

The vulnerability of Microprogramming Software, including Intel Converged Security and Manageability Engine CSME, Intel Trusted Execution Engine TXE, and Intel Server Platform Services SPS, is related to the execution of operations outside of the buffer in memory. Exploitation of this vulnerabili...

6.8CVSS7.9AI score0.00482EPSS
Exploits0References3Affected Software3
Rows per page
Query Builder