Lucene search

K
IntelConverged Security Management Engine Firmware

26 matches found

CVE
CVE
added 2019/05/17 4:29 p.m.113 views

CVE-2019-0086

Insufficient access control vulnerability in Dynamic Application Loader software for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access.

7.8CVSS7.7AI score0.00136EPSS
CVE
CVE
added 2019/05/17 4:29 p.m.104 views

CVE-2019-0170

Buffer overflow in subsystem in Intel(R) DAL before version 12.0.35 may allow a privileged user to potentially enable escalation of privilege via local access.

6.7CVSS7.1AI score0.00164EPSS
CVE
CVE
added 2019/05/17 4:29 p.m.99 views

CVE-2019-0153

Buffer overflow in subsystem in Intel(R) CSME 12.0.0 through 12.0.34 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

9.8CVSS9AI score0.00592EPSS
CVE
CVE
added 2019/05/17 4:29 p.m.85 views

CVE-2019-0098

Logic bug vulnerability in subsystem for Intel(R) CSME before version 12.0.35, Intel(R) TXE before 3.1.65, 4.0.15 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

7.2CVSS7.2AI score0.00167EPSS
CVE
CVE
added 2019/12/18 10:15 p.m.81 views

CVE-2019-0169

Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an unauthenticated user to potentially enable escalation of privileges, information disclosure or denial of service via adjacent access.

8.8CVSS8.8AI score0.0028EPSS
CVE
CVE
added 2019/12/18 10:15 p.m.81 views

CVE-2019-11147

Insufficient access control in hardware abstraction driver for MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0, 14.0.10; TXEInfo software for Intel(R) TXE before versions 3.1.70 and 4.0.20; INTEL-SA-00086 Detection Tool version 1.2.7.0 or before; INTEL...

7.8CVSS8.1AI score0.00391EPSS
CVE
CVE
added 2019/12/18 10:15 p.m.80 views

CVE-2019-0168

Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45 and 13.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access.

4.4CVSS4.9AI score0.00141EPSS
CVE
CVE
added 2019/12/18 10:15 p.m.80 views

CVE-2019-11106

Insufficient session validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access.

6.7CVSS7AI score0.00127EPSS
CVE
CVE
added 2019/12/18 10:15 p.m.78 views

CVE-2019-11105

Logic issue in subsystem for Intel(R) CSME before versions 12.0.45, 13.0.10 and 14.0.10 may allow a privileged user to potentially enable escalation of privilege and information disclosure via local access.

6.7CVSS6.8AI score0.0015EPSS
CVE
CVE
added 2019/12/18 10:15 p.m.76 views

CVE-2019-0165

Insufficient Input validation in the subsystem for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a privileged user to potentially enable denial of service via local access.

4.4CVSS5.1AI score0.00134EPSS
CVE
CVE
added 2019/12/18 10:15 p.m.76 views

CVE-2019-11103

Insufficient input validation in firmware update software for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8CVSS8.1AI score0.00137EPSS
CVE
CVE
added 2019/12/18 10:15 p.m.76 views

CVE-2019-11104

Insufficient input validation in MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8CVSS8.1AI score0.00148EPSS
CVE
CVE
added 2019/12/18 10:15 p.m.75 views

CVE-2019-11101

Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access.

4.4CVSS4.9AI score0.00147EPSS
CVE
CVE
added 2019/12/18 10:15 p.m.71 views

CVE-2019-11108

Insufficient input validation in subsystem for Intel(R) CSME before versions 12.0.45 and 13.0.10 may allow a privileged user to potentially enable escalation of privilege via local access.

6.7CVSS7AI score0.0015EPSS
CVE
CVE
added 2019/12/18 10:15 p.m.69 views

CVE-2019-11087

Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege, information disclosure or denial of s...

6.7CVSS6.7AI score0.00147EPSS
CVE
CVE
added 2019/12/18 10:15 p.m.69 views

CVE-2019-11110

Authentication bypass in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access.

6.7CVSS7.1AI score0.00072EPSS
CVE
CVE
added 2019/06/13 4:29 p.m.55 views

CVE-2018-12147

Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Intel® Trusted Execution Engine Firmware before version 3.1.55 may allow a privileged user to potentially enable escalation of privileges via local access...

7.2CVSS6.6AI score0.00045EPSS
CVE
CVE
added 2019/03/14 8:29 p.m.43 views

CVE-2018-12190

Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel(r) TXE before 3.1.60 or 4.0.10 may allow a privileged user to potentially enable an escalation of privilege via local access.

6.7CVSS6.7AI score0.00133EPSS
CVE
CVE
added 2019/03/14 8:29 p.m.42 views

CVE-2018-12189

Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access.

4.4CVSS5.2AI score0.0012EPSS
CVE
CVE
added 2019/03/14 8:29 p.m.42 views

CVE-2018-12191

Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versions 4.00.04.383 or SPS 4.01.02.174, or Intel(R) TXE before versions 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially execute arbitr...

7.6CVSS7.4AI score0.00246EPSS
CVE
CVE
added 2019/03/14 8:29 p.m.41 views

CVE-2018-12185

Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially execute arbitrary code via physical access.

6.8CVSS7.1AI score0.00156EPSS
CVE
CVE
added 2019/03/14 8:29 p.m.40 views

CVE-2018-12192

Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before version SPS_E5_04.00.04.393.0 may allow an unauthenticated user to potentially bypass MEBx authentication via physical access.

7.2CVSS6.8AI score0.00072EPSS
CVE
CVE
added 2019/03/14 8:29 p.m.40 views

CVE-2018-12196

Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a privileged user to potentially execute arbitrary code via local access.

6.7CVSS6.9AI score0.00159EPSS
CVE
CVE
added 2019/03/14 8:29 p.m.39 views

CVE-2018-12188

Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially modify data via physical access.

4.6CVSS5.5AI score0.00114EPSS
CVE
CVE
added 2019/03/14 8:29 p.m.38 views

CVE-2018-12208

Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4.0.10, or Intel(R) Server Platform Services before version 5.00.04.012 may allow an unauthenticated user to potentially execute arbitrary code via phy...

7.6CVSS7.7AI score0.00401EPSS
CVE
CVE
added 2019/03/14 8:29 p.m.36 views

CVE-2018-12199

Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before 3.1.60 or 4.0.10 may allow a privileged user to potentially execute arbitrary code via physical access.

7.2CVSS6.9AI score0.00152EPSS