Intel Converged Security and Management Engine (CSME) 11.8.0

CPE Details

Intel Converged Security and Management Engine (CSME) 11.8.0
11.8.0
2021-01-26
17h31 +00:00
2021-01-26
17h31 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:intel:converged_security_and_management_engine:11.8.0:*:*:*:*:*:*:*

Informations

Vendor

intel

Product

converged_security_and_management_engine

Version

11.8.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-8755 2020-11-12 17h09 +00:00 Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and E3_05.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
6.4
Medium
CVE-2020-8744 2020-11-12 17h06 +00:00 Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions before E3_05.01.04.200 may allow a privileged user to potentially enable escalation of privilege via local access.
7.8
High
CVE-2019-0090 2019-05-17 13h41 +00:00 Insufficient access control vulnerability in subsystem for Intel(R) CSME before versions 11.x, 12.0.35 Intel(R) TXE 3.x, 4.x, Intel(R) Server Platform Services 3.x, 4.x, Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
7.1
High
CVE-2019-0091 2019-05-17 13h41 +00:00 Code injection vulnerability in installer for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access.
7.8
High
CVE-2019-0093 2019-05-17 13h41 +00:00 Insufficient data sanitization vulnerability in HECI subsystem for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow a privileged user to potentially enable information disclosure via local access.
4.4
Medium