Intel Converged Security Management Engine (CSME) Firmware 11.20

CPE Details

Intel Converged Security Management Engine (CSME) Firmware 11.20
intel
converged_security_management_engine_firmware
11.20
2019-05-20
10h55 +00:00
2021-03-25
15h16 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:intel:converged_security_management_engine_firmware:11.20:*:*:*:*:*:*:*

Informations

Vendor

intel

Product

converged_security_management_engine_firmware

Version

11.20

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-29871 2023-08-11 02h36 +00:00 Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
7.8
High
CVE-2022-36392 2023-08-11 02h36 +00:00 Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel (R) CSME may allow an unauthenticated user to potentially enable denial of service via network access.
8.6
High
CVE-2019-0086 2019-05-17 13h41 +00:00 Insufficient access control vulnerability in Dynamic Application Loader software for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access.
7.8
High
CVE-2019-0153 2019-05-17 13h41 +00:00 Buffer overflow in subsystem in Intel(R) CSME 12.0.0 through 12.0.34 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
9.8
Critical
CVE-2019-0170 2019-05-17 13h41 +00:00 Buffer overflow in subsystem in Intel(R) DAL before version 12.0.35 may allow a privileged user to potentially enable escalation of privilege via local access.
6.7
Medium
CVE-2018-3616 2018-09-12 19h00 +00:00 Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.
5.9
Medium
CVE-2018-3657 2018-09-12 19h00 +00:00 Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access.
6.7
Medium
CVE-2018-3658 2018-09-12 19h00 +00:00 Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access.
5.3
Medium