Converged Security Management Engine Firmware Security Vulnerabilities and Issues — Converged Security Management Engine Firmware CVE List

Lucene search

IntelConverged Security Management Engine Firmware

9 matches found

CVE•added 2019/03/14 8:29 p.m.•43 views

CVE-2018-12190

Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel(r) TXE before 3.1.60 or 4.0.10 may allow a privileged user to potentially enable an escalation of privilege via local access.

6.7CVSS6.7AI score0.00133EPSS

CVE•added 2019/03/14 8:29 p.m.•42 views

CVE-2018-12189

Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access.

4.4CVSS5.2AI score0.0012EPSS

CVE•added 2019/03/14 8:29 p.m.•42 views

CVE-2018-12191

Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versions 4.00.04.383 or SPS 4.01.02.174, or Intel(R) TXE before versions 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially execute arbitr...

7.6CVSS7.4AI score0.00246EPSS

CVE•added 2019/03/14 8:29 p.m.•41 views

CVE-2018-12185

Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially execute arbitrary code via physical access.

6.8CVSS7.1AI score0.00156EPSS

CVE•added 2019/03/14 8:29 p.m.•40 views

CVE-2018-12192

Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before version SPS_E5_04.00.04.393.0 may allow an unauthenticated user to potentially bypass MEBx authentication via physical access.

7.2CVSS6.8AI score0.00072EPSS

CVE•added 2019/03/14 8:29 p.m.•40 views

CVE-2018-12196

Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a privileged user to potentially execute arbitrary code via local access.

6.7CVSS6.9AI score0.00159EPSS

CVE•added 2019/03/14 8:29 p.m.•39 views

CVE-2018-12188

Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially modify data via physical access.

4.6CVSS5.5AI score0.00114EPSS

CVE•added 2019/03/14 8:29 p.m.•38 views

CVE-2018-12208

Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4.0.10, or Intel(R) Server Platform Services before version 5.00.04.012 may allow an unauthenticated user to potentially execute arbitrary code via phy...

7.6CVSS7.7AI score0.00401EPSS

CVE•added 2019/03/14 8:29 p.m.•36 views

CVE-2018-12199

Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before 3.1.60 or 4.0.10 may allow a privileged user to potentially execute arbitrary code via physical access.

7.2CVSS6.9AI score0.00152EPSS