Intel

Converged Security And Management Engine

6 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2025-20037

Media report
  • EPSS 0.02%
  • Published 12.08.2025 16:57:58
  • Last modified 13.08.2025 17:34:12

Time-of-check time-of-use race condition in firmware for some Intel(R) Converged Security and Management Engine may allow a privileged user to potentially enable escalation of privilege via local access.

7.8

CVE-2020-8744

  • EPSS 0.16%
  • Published 12.11.2020 18:15:17
  • Last modified 21.11.2024 05:39:22

Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions before E3_05.01.04.200 may allow a privileged user to potentially enable ...

6.4

CVE-2020-8755

  • EPSS 0.07%
  • Published 12.11.2020 18:15:17
  • Last modified 21.11.2024 05:39:23

Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and E3_05.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

7.8

CVE-2019-0091

  • EPSS 0.12%
  • Published 17.05.2019 16:29:01
  • Last modified 21.11.2024 04:16:12

Code injection vulnerability in installer for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access.

4.4

CVE-2019-0093

  • EPSS 0.12%
  • Published 17.05.2019 16:29:01
  • Last modified 21.11.2024 04:16:13

Insufficient data sanitization vulnerability in HECI subsystem for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow a privileged user to potentially enable information ...

7.1

CVE-2019-0090

  • EPSS 0.45%
  • Published 17.05.2019 16:29:00
  • Last modified 21.11.2024 04:16:12

Insufficient access control vulnerability in subsystem for Intel(R) CSME before versions 11.x, 12.0.35 Intel(R) TXE 3.x, 4.x, Intel(R) Server Platform Services 3.x, 4.x, Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow an unauthenticated u...