Intel

Converged Security Management Engine Firmware

36 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2018-12199

  • EPSS 0.15%
  • Published 14.03.2019 20:29:00
  • Last modified 21.11.2024 03:44:44

Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before 3.1.60 or 4.0.10 may allow a privileged user to potentially execute arbitrary code via physical access.

7.6

CVE-2018-12208

  • EPSS 0.4%
  • Published 14.03.2019 20:29:00
  • Last modified 21.11.2024 03:44:46

Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4.0.10, or Intel(R) Server Platform Services before version 5.00.04.012 may allow an unauthenticated u...

6.8

CVE-2018-3659

  • EPSS 0.2%
  • Published 12.09.2018 19:29:03
  • Last modified 21.11.2024 04:05:51

A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to potentially disclose information via physical access.

7.3

CVE-2018-3655

  • EPSS 0.17%
  • Published 12.09.2018 19:29:02
  • Last modified 21.11.2024 04:05:50

A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or discl...

8.2

CVE-2018-3643

  • EPSS 0.21%
  • Published 12.09.2018 19:29:02
  • Last modified 21.11.2024 04:05:49

A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) before version 11.8.55, 11.11.55, 11.21.55, 12.0.6 or Intel(R) Server Platform Services firmware before version...

8.2

CVE-2018-3627

  • EPSS 0.26%
  • Published 10.07.2018 21:29:00
  • Last modified 21.11.2024 04:05:47

Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local privileged access.