converged security management engine firmware vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

Improper input validation in the DAL subsystem for Intel(R) CSME versions prior to 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an unauthenticated user to potentially enable denial of service via network access.

Intel Converged Security Management Engine Firmware Intel Converged Security Management Engine Firmware 14.5.11

4.6

CVSSv2

Out-of-bounds write in subsystem for Intel(R) CSME versions prior to 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow a privileged user to potentially enable escalation of privilege via local access.

Intel Converged Security Management Engine Firmware Intel Converged Security Management Engine Firmware 14.5.11

4.6

CVSSv2

Improper buffer restrictions in subsystem for Intel(R) CSME versions prior to 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access.

Intel Converged Security Management Engine Firmware Intel Converged Security Management Engine Firmware 14.5.11

4.6

CVSSv2

Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially execute arbitrary code via physical access.

Intel Converged Security Management Engine Firmware

4.6

CVSSv2

Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a privileged user to potentially execute arbitrary code via local access.

Intel Converged Security Management Engine Firmware

7.5

CVSSv2

Buffer overflow in subsystem in Intel(R) CSME 12.0.0 up to and including 12.0.34 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Intel Converged Security Management Engine Firmware

2.1

CVSSv2

Insufficient Input validation in the subsystem for Intel(R) CSME prior to 12.0.45,13.0.10 and 14.0.10 may allow a privileged user to potentially enable denial of service via local access.

Intel Converged Security Management Engine Firmware

4.6

CVSSv2

Buffer overflow in subsystem in Intel(R) DAL before version 12.0.35 may allow a privileged user to potentially enable escalation of privilege via local access.

Intel Converged Security Management Engine Firmware

4.6

CVSSv2

Insufficient input validation in firmware update software for Intel(R) CSME prior to 12.0.45,13.0.10 and 14.0.10 may allow an authenticated user to potentially enable escalation of privilege via local access.

Intel Converged Security Management Engine Firmware

4.6

CVSSv2

Logic issue in subsystem for Intel(R) CSME prior to 12.0.45, 13.0.10 and 14.0.10 may allow a privileged user to potentially enable escalation of privilege and information disclosure via local access.

Intel Converged Security Management Engine Firmware

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook