Lucene search
+L

152 matches found

CNVD
CNVD
•added 2020/06/11 12:00 a.m.•25 views

Intel CSME, TXE and SPS Input Validation Error Vulnerability

Intel Converged Security and Management Engine CSME, etc. are products of Intel Corporation, USA. Intel Converged Security and Management Engine is a security management engine. Intel Server Platform Services SPS is a server platform service program. Intel Converged Security and Management Engine...

4.4CVSS6.8AI score0.00408EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/03/20 12:00 a.m.•19 views

Intel Converged Security and Privilege Escalation

The vulnerability of Intel Converged Security and Manageability Engine CSME is related to authentication deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, or expose sensitive information...

8.2CVSS6.6AI score0.00453EPSS
SaveExploits0References3Affected Software1
ThreatPost
ThreatPost
•added 2020/02/11 7:46 p.m.•93 views

Intel Patches High-Severity Flaw in Security Engine

Intel is warning of a high-severity flaw in the firmware of its converged security and management engine CSME, which if exploited could allow privilege escalation, denial of service and information disclosure. CSME powers Intel’s Active Management System hardware and firmware technology, used for...

4.6CVSS8AI score0.05272EPSS
SaveExploits1References18
osv_cve
osv_cve
•added 2019/12/18 10:15 p.m.•18 views

CVE-2019-11104

Insufficient input validation in MEInfo software for IntelR CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.2AI score0.00355EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/12/13 12:00 a.m.•25 views

MEinfo Hardware Abstraction Layer Privilege Escalation

The vulnerability of the MEinfo driver for hardware abstraction in Intel Converged Security and Manageability Engine CSME microprogramming software, Intel Trusted Execution Engine TXE microprogramming software, Intel-SA-00086 Detection Tool, and INTEL-SA-00125 Detection Tool is related to...

8.2CVSS7.4AI score0.00377EPSS
SaveExploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
•added 2019/12/13 12:00 a.m.•26 views

Intel Converged Security and Privilege Escalation

The vulnerability of Intel Converged Security and Manageability Engine CSME is related to a logical error. Exploiting this vulnerability can allow attackers to enhance their privileges and expose sensitive information...

7.9CVSS6.9AI score0.00399EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/12/13 12:00 a.m.•23 views

Intel Converged Security and Manageability Engine Privilege Escalation

The vulnerability of Intel Converged Security and Manageability Engine CSME exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.3CVSS7.3AI score0.00355EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2019/12/06 12:00 a.m.•20 views

Unspecified Vulnerability in Multiple Intel Products

Intel Converged Security and Management Engine CSME, etc. are products of Intel Corporation.Intel Converged Security and Management Engine is a security management engine.Intel TXE is a Trust Execution Engine TEE with hardware verification in CPU Central Processing Unit.INTEL-SA-00086 Detection...

7.8CVSS6.9AI score0.00377EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/12/05 12:00 a.m.•26 views

Intel TXE and Intel Converged Security and Management Engine Input Validation Error Vulnerability (CNVD-2020-18615)

Intel Converged Security and Management Engine CSME and Intel TXE are both products of Intel Corporation, U.S.A. Intel Converged Security and Management Engine is a security management engine. Intel TXE is a trust execution engine with hardware authentication capabilities for use in CPUs central...

7.8CVSS7.2AI score0.00355EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/12/05 12:00 a.m.•21 views

Intel TXE and Intel Converged Security and Management Engine Input Validation Error Vulnerability (CNVD-2020-18614)

Intel Converged Security and Management Engine CSME and Intel TXE are both products of Intel Corporation.Intel Converged Security and Management Engine is a security management engine. Intel TXE is a trust execution engine with hardware validation capabilities for use in CPUs Central Processing...

4.4CVSS6.8AI score0.00346EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/11/25 12:00 a.m.•23 views

Intel Converged Security and Manageability Engine Session Verification

The vulnerability of the Intel Active Management Technology AMT implementation of the Intel Converged Security and Manageability Engine CSME software is related to insufficient session verification. Exploiting this vulnerability can allow attackers to enhance their privileges...

4.6CVSS6.9AI score0.00335EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/11/25 12:00 a.m.•24 views

Intel Converged Security and Manageability Engine Disclosure Information Disclosure

The vulnerability of Microprogramming Software: Intel Converged Security and Manageability Engine CSME, Intel Trusted Execution Engine TXE, and Intel Dynamic Application Loader DAL is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose...

4.1CVSS6.5AI score0.00346EPSS
SaveExploits0References2Affected Software3
CNVD
CNVD
•added 2019/06/14 12:00 a.m.•25 views

Intel Converged Security and Management Engine, Server Platform Services and Trusted Execution Engine HECI subsystem privilege permission and access control issue vulnerability

Intel Converged Security and Management Engine CSME, etc. are products of Intel Corporation.Intel Converged Security and Management Engine is a security management engine.Intel Server Platform Services SPS is a server platform service program.Intel Trusted Execution Engine is a trusted execution...

7.2CVSS7.9AI score0.00458EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/06/06 12:00 a.m.•24 views

Dynamic Application Loader component Privilege Escalation

The vulnerability of the Dynamic Application Loader component of the Intel Converged Security and Manageability Engine and the Intel Trusted Execution Engine is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.00358EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/06/06 12:00 a.m.•19 views

Intel Converged Security and Manageability Engine Privilege Escalation

The vulnerabilities of Intel Converged Security and Manageability Engine and Intel Trusted Execution Engine are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

5.7CVSS6.9AI score0.00472EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/06/06 12:00 a.m.•25 views

Intel Converged Security and Manageability Engine Privilege Escalation

The vulnerability of the Intel Converged Security and Manageability Engine and the Intel Trusted Execution Engine is related to incorrect code generation management. Exploitation of this vulnerability can allow attackers to enhance their privileges...

6.6CVSS7.3AI score0.00519EPSS
SaveExploits0References3Affected Software2
CNVD
CNVD
•added 2019/05/22 12:00 a.m.•20 views

Intel Converged Security and Management Engine and Intel Server Platform Services HECI Subsystem Information Disclosure Vulnerability

The Intel Converged Security and Management Engine CSME and Intel Server Platform Services SPS are both products of Intel Corporation.Intel Converged Security and Management Engine is a security management engine. Intel Converged Security and Management Engine CSME and Intel Server Platform...

4.4CVSS6.2AI score0.00394EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/05/22 12:00 a.m.•24 views

Intel TXE and Intel Converged Security and Management Engine Privilege Permission and Access Control Issues Vulnerabilities

Intel Converged Security and Management Engine CSME and Intel TXE are both products of Intel Corporation, U.S.A. Intel Converged Security and Management Engine is a security management engine. Intel TXE is a trust execution engine with hardware authentication capabilities for use in CPUs central...

7.2CVSS7.2AI score0.00472EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/05/22 12:00 a.m.•19 views

Intel TXE and Intel Converged Security and Management Engine Privilege License and Access Control Issues Vulnerability (CNVD-2020-18604)

Intel Converged Security and Management Engine CSME and Intel TXE are both products of Intel Corporation, U.S.A. Intel Converged Security and Management Engine is a security management engine. Intel TXE is a trust execution engine with hardware authentication capabilities for use in CPUs central...

7.8CVSS7.2AI score0.00358EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/03/27 12:00 a.m.•19 views

HECI Subsystem Code Execution

The vulnerability of Microprogramming Software, including Intel Converged Security and Manageability Engine CSME, Intel Trusted Execution Engine TXE, and Intel Server Platform Services SPS, is related to the execution of operations outside of the buffer in memory. Exploitation of this vulnerabili...

7.1CVSS8AI score0.00511EPSS
SaveExploits0References3Affected Software3
Rows per page
Query Builder