CVE-2017-5689

CVE-2017-5689 describes a privilege-escalation vulnerability in Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT). An unprivileged network or local attacker could gain administrative or higher privileges to provision manageabil...

CVE-2020-0543

CVE-2020-0543 (Special Register Buffer Data Sampling) is a privilege-local information-disclosure issue in Intel processors caused by incomplete cleanup of certain special-register reads. The Connected documents corroborate SRBDS as the underlying problem and tie mitigations to microcode updates ...

CVE-2018-3639

CVE-2018-3639 is a speculative execution side‑channel vulnerability (SSB) that can leak memory via speculative stores. The Connected ALMA doc notes a mitigation: SSB is disabled by the new alt-java launcher, reducing impact at the cost of performance, and it references OpenJDK 8u282 as part of th...

CVE-2020-8698

CVE-2020-8698 is an information-disclosure vulnerability in Intel microcode affecting shared-resource isolation. An authenticated local attacker could disclose data via RAPL/isolation weaknesses. Public detail confirms affected Intel processors and that mitigations are microcode updates released ...

CVE-2017-5712

CVE-2017-5712 is a buffer overflow in Intel Manageability Engine Firmware (AMT) affecting ME/AMT versions 8.x–11.20. The vulnerability allows a remote attacker with Admin access to execute arbitrary code with AMT execution privileges (CVSSv3: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H; base score 7.2). ...

CVE-2020-12357

CVE-2020-12357 describes an improper initialization in the firmware for some Intel processors that could allow a privileged user to escalate privileges via local access. The vulnerability is documented in Intel’s IPU BIOS advisory (INTEL-SA-00463) and is linked to the same family of processor fir...

CVE-2021-41838

CVE-2021-41838 affects Insyde H2O SdHostDriver in the kernel 5.0–5.5. The vulnerability enables an attacker with local access to trigger a System Management Mode (SMM) callout and execute arbitrary code due to a Numeric Range Comparison Without a Minimum Check in SdHostDriver. Across connected so...

CVE-2018-3616

CVE-2018-3616 is a Bleichenbacher-style side-channel vulnerability in the TLS implementation of Intel AMT/CSME firmware prior to 12.0.5. An unauthenticated attacker could potentially obtain the TLS session key over the network. Public-internal sources confirm impact on Intel AMT/CSME (TLS) with C...

CVE-2021-42059

CVE-2021-42059 affects Insyde InsydeH2O Kernel 5.0 (before 05.08.41), 5.1 (before 05.16.41), 5.2 (before 05.26.41), 5.3 (before 05.35.41), and 5.4 (before 05.42.20). The issue is a stack-based buffer overflow in the UEFI DisplayTypeDxe DXE driver that leads to arbitrary code execution. The vulner...

CVE-2021-42554

CVE-2021-42554 concerns an SMM memory corruption in InsydeH2O’s FvbServicesRuntimeDxe, allowing an attacker to write fixed or predictable data to SMRAM and potentially escalate to System Management Mode. Affected firmware is InsydeH2O with Kernel 5.0 before 05.08.42, 5.1 before 05.16.42, 5.2 befo...

CVE-2018-3658

CVE-2018-3658 affects Intel AMT in Intel CSME firmware prior to 12.0.5. The issue is described as multiple memory leaks that may allow an unauthenticated, Intel AMT-provisioned user to cause a partial denial of service over the network. Remediation: upgrade to the latest Intel CSME firmware versi...

CVE-2020-27339

CVE-2020-27339 affects InsydeH2O kernel 5.x, where several SMM drivers (AhciBusDxe, IdeBusDxe, NvmExpressDxe, SdHostDriverDxe, SdMmcDeviceDxe) fail to validate the CommBuffer and CommBufferSize, allowing memory corruption of firmware or OS memory. The issue is fixed in kernel 5.1–5.5 with specifi...

CVE-2020-5953

CVE-2020-5953 affects InsydeH2O UEFI firmware, where the System Management Interrupt (SWSMI) handler dereferences EFI_RUNTIME_SERVICES (gRT) to call GetVariable outside SMRAM, enabling code execution in SMM and privilege escalation. Impact is local and architectural, as described in multiple sour...

CVE-2021-33626

CVE-2021-33626 affects InsydeH2O’s SMM code, specifically the SmmResourceCheckDxe driver, where a SWSMI handler registers without proper validation of the CommBuffer pointer, enabling data corruption in SMRAM and potential arbitrary code execution. Connected vendor disclosures confirm this vulner...

CVE-2021-33625

Mode C: Normal (concrete details present) Vulnerability: InsydeH2O firmware (Kernel 5.x) used by HddPassword suffers an SMM/SMI buffer validation flaw. Software SMI services that use the EFI_SMM_COMMUNICATION_PROTOCOL’s Communicate() do not verify the buffer address, enabling access to SMRAM, MMI...

CVE-2018-3657

CVE-2018-3657 affects Intel AMT in Intel CSME firmware prior to 12.0.5, enabling a local attacker with high privileges to potentially execute arbitrary code with AMT execution rights via local access. The issue is described across multiple sources (NVD entry and related advisories) with a CVSSv3 ...

CVE-2021-41837

CVE-2021-41837 affects InsydeH2O’s AhciBusDxe driver in kernel versions 5.0–5.5. The flaw stems from an Untrusted Pointer Dereference that can corrupt SMM memory (SMRAM) and enable a local attacker to escalate privileges to System Management Mode. Public documentation (NVD/Tenable, Binarly/CERT a...

CVE-2020-8745

CVE-2020-8745 is a vulnerability in Intel CSME/TXE subsystems with insufficient control flow management in the subsystem, affecting Intel CSME/AMT/SPS firmware before specific versions (e.g., 11.8.x/11.12.x/11.22.x/12.0.x/13.0.x/14.x branches and TXE before 3.1.80 and 4.0.30). The issue could all...

CVE-2021-33627

CVE-2021-33627 affects Insyde InsydeH2O 5.x (FwBlockServiceSmm). The SMM Communicate() handling does not validate the buffer address, enabling use of SMRAM, MMIO, or OS kernel addresses. Impact: local attacker could escalate to SMM execution and potentially compromise SMRAM or firmware. Fixed in ...

CVE-2020-8670

CVE-2020-8670 is a race-condition flaw in Intel processor firmware that could allow a local privileged attack. No public exploits are known in the provided documents. Affected data indicates local access is required, with INTEL-SA advisories (INTEL-SA-00463) and related mitigations referenced by ...

CVE-2020-24507

CVE-2020-24507 is an information-disclosure vulnerability due to improper initialization in the Intel CSME subsystem. Reports in connected docs (Intel advisory INTEL-SA-00459) state it affects Intel CSME versions prior to: 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32,...

CVE-2017-5711

CVE-2017-5711 covers multiple buffer overflows in Intel Manageability Engine Firmware AMT (8.x/9.x/10.x/11.x.0/11.5/11.6/11.7/11.10/11.20). The vulnerability allows a local attacker to execute arbitrary code with AMT execution privilege via the AMT component. Affected component: Intel AMT/ME firm...

CVE-2020-8703

The CVE-2020-8703 issue is an Intel CSME subsystem vulnerability caused by improper buffer restrictions. Affected firmwares include Intel CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22, potentially allowing a privileged user to escalate ...

CVE-2020-8704

CVE-2020-8704 affects Intel LMS (Local Manageability Service) with a race condition in the LMS subsystem prior to firmware v2039.1.0.0, enabling potential local privilege escalation. Mitigation per connected sources is to update to the latest firmware/software provided by OEM (Intel advisory INTE...