Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

intel converged security and management engine vulnerabilities and exploits

(subscribe to this query)
4.4
CVSSv3
CVE-2019-0093
Insufficient data sanitization vulnerability in HECI subsystem for Intel(R) CSME prior to 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow a privileged user to potentially enable information disclosure via local access.
Intel Converged Security And Management Engine
7.8
CVSSv3
CVE-2019-0091
Code injection vulnerability in installer for Intel(R) CSME prior to 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access.
Intel Converged Security And Management EngineIntel Trusted Execution Technology
7.1
CVSSv3
CVE-2019-0090
Insufficient access control vulnerability in subsystem for Intel(R) CSME prior to 11.x, 12.0.35 Intel(R) TXE 3.x, 4.x, Intel(R) Server Platform Services 3.x, 4.x, Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow an unauthenticated user to potentially enable escalation ...
Intel Converged Security And Management EngineIntel Server Platform Services
6.4
CVSSv3
CVE-2020-8755
Race condition in subsystem for Intel(R) CSME versions prior to 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and E3_05.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Intel Converged Security And Management EngineIntel Server Platform Services
7.8
CVSSv3
CVE-2020-8744
Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions prior to 4.0.30 Intel(R) SPS versions before E3_05.01.04.200 may allow a privileged user to potentially enable escalation of privilege via ...
Intel Trusted Execution EngineIntel Server Platform ServicesIntel Converged Security And Management EngineSiemens Simatic S7-1518-4 Pn\\/dp Mfp Firmware -Siemens Simatic S7-1518f-4 Pn\\/dp Mfp Firmware -Siemens Simatic S7-1500 Firmware -
5.9
CVSSv3
CVE-2018-3616
Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology prior to 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.
Intel Manageability Engine FirmwareIntel Active Management Technology FirmwareIntel Converged Security Management Engine FirmwareSiemens Simatic Field Pg M5 FirmwareSiemens Simatic Ipc427e FirmwareSiemens Simatic Ipc477e FirmwareSiemens Simatic Ipc547e FirmwareSiemens Simatic Pc547g FirmwareSiemens Simatic Ipc627d FirmwareSiemens Simatic Ipc647d FirmwareSiemens Simatic Ipc677d FirmwareSiemens Simatic Ipc827d FirmwareSiemens Simatic Ipc847d FirmwareSiemens Simatic Itp1000 Firmware
8.2
CVSSv3
CVE-2018-3643
A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) before version 11.8.55, 11.11.55, 11.21.55, 12.0.6 or Intel(R) Server Platform Services firmware before version 4.x.04 may allow an attacker ...
Intel Server Platform Services FirmwareIntel Converged Security Management Engine Firmware
7.3
CVSSv3
CVE-2018-3655
A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical a...
Intel Converged Security Management Engine FirmwareIntel Server Platform Services FirmwareIntel Trusted Execution Engine Firmware
6.7
CVSSv3
CVE-2018-3657
Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access.
Siemens Simatic Field Pg M5 FirmwareSiemens Simatic Ipc427e FirmwareSiemens Simatic Ipc477e FirmwareSiemens Simatic Ipc547e FirmwareSiemens Simatic Pc547g FirmwareSiemens Simatic Ipc627d FirmwareSiemens Simatic Ipc647d FirmwareSiemens Simatic Ipc677d FirmwareSiemens Simatic Ipc827d FirmwareSiemens Simatic Ipc847d FirmwareSiemens Simatic Itp1000 FirmwareIntel Manageability Engine FirmwareIntel Active Management Technology FirmwareIntel Converged Security Management Engine Firmware
5.3
CVSSv3
CVE-2018-3658
Multiple memory leaks in Intel AMT in Intel CSME firmware versions prior to 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access.
Siemens Simatic Field Pg M5 FirmwareSiemens Simatic Ipc427e FirmwareSiemens Simatic Ipc477e FirmwareSiemens Simatic Ipc547e FirmwareSiemens Simatic Pc547g FirmwareSiemens Simatic Ipc627d FirmwareSiemens Simatic Ipc647d FirmwareSiemens Simatic Ipc677d FirmwareSiemens Simatic Ipc827d FirmwareSiemens Simatic Ipc847d FirmwareSiemens Simatic Itp1000 FirmwareIntel Manageability Engine FirmwareIntel Active Management Technology FirmwareIntel Converged Security Management Engine Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook