Intel
Intel Converged Security Management Engine Firmware: vulnerabilidades y CVE
Intel Converged Security Management Engine Firmware tiene 44 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE44
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-38102 | Media (4.4) | 0.20% | — | 11 ago 2023 | Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may allow a privileged user to potentially enable denial of service via local access. |
| CVE-2022-36392 | Alta (7.5) | 0.66% | — | 11 ago 2023 | Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel (R) CSME may allow an… |
| CVE-2022-29871 | Alta (7.8) | 0.15% | — | 11 ago 2023 | Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2020-0545 | Media (4.4) | 0.41% | — | 15 jun 2020 | Integer overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and Intel(R) TXE versions before 3.1.75, 4.0.25 and Intel(R) Server Platform Services (SPS) versions before… |
| CVE-2020-0542 | Alta (7.8) | 0.41% | — | 15 jun 2020 | Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or… |
| CVE-2020-0541 | Media (6.7) | 0.40% | — | 15 jun 2020 | Out-of-bounds write in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2020-0539 | Media (5.5) | 0.37% | — | 15 jun 2020 | Path traversal in subsystem for Intel(R) DAL software for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 and Intel(R) TXE versions before 3.1.75, 4.0.25 may allow an unprivileged… |
| CVE-2020-0536 | Alta (7.5) | 1.7% | — | 15 jun 2020 | Improper input validation in the DAL subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and Intel(R) TXE versions before 3.1.75 and 4.0.25 may allow an unauthenticated user… |
| CVE-2020-0534 | Alta (7.5) | 1.9% | — | 15 jun 2020 | Improper input validation in the DAL subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an unauthenticated user to potentially enable denial of service via network access. |
| CVE-2020-0533 | Media (6.7) | 0.25% | — | 15 jun 2020 | Reversible one-way hash in Intel(R) CSME versions before 11.8.76, 11.12.77 and 11.22.77 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local… |
| CVE-2019-14598 | Media (6.7) | 0.45% | — | 13 feb 2020 | Improper Authentication in subsystem in Intel(R) CSME versions 12.0 through 12.0.48 (IOT only: 12.0.56), versions 13.0 through 13.0.20, versions 14.0 through 14.0.10 may allow a privileged user to potentially enable… |
| CVE-2019-11147 | Alta (7.8) | 0.38% | — | 18 dic 2019 | Insufficient access control in hardware abstraction driver for MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0, 14.0.10; TXEInfo software for Intel(R) TXE before versions… |
| CVE-2019-11110 | Media (6.7) | 0.37% | — | 18 dic 2019 | Authentication bypass in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to… |
| CVE-2019-11108 | Media (6.7) | 0.35% | — | 18 dic 2019 | Insufficient input validation in subsystem for Intel(R) CSME before versions 12.0.45 and 13.0.10 may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2019-11106 | Media (6.7) | 0.34% | — | 18 dic 2019 | Insufficient session validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable… |
| CVE-2019-11105 | Media (6.7) | 0.40% | — | 18 dic 2019 | Logic issue in subsystem for Intel(R) CSME before versions 12.0.45, 13.0.10 and 14.0.10 may allow a privileged user to potentially enable escalation of privilege and information disclosure via local access. |
| CVE-2019-11104 | Alta (7.8) | 0.36% | — | 18 dic 2019 | Insufficient input validation in MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an authenticated… |
| CVE-2019-11103 | Alta (7.8) | 0.36% | — | 18 dic 2019 | Insufficient input validation in firmware update software for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2019-11101 | Media (4.4) | 0.35% | — | 18 dic 2019 | Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to… |
| CVE-2019-11087 | Media (6.7) | 0.36% | — | 18 dic 2019 | Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to… |
| CVE-2019-0169 | Alta (8.8) | 0.76% | — | 18 dic 2019 | Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an unauthenticated user to potentially enable escalation of… |
| CVE-2019-0168 | Media (4.4) | 0.35% | — | 18 dic 2019 | Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45 and 13.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information… |
| CVE-2019-0165 | Media (4.4) | 0.31% | — | 18 dic 2019 | Insufficient Input validation in the subsystem for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a privileged user to potentially enable denial of service via local access. |
| CVE-2018-12147 | Media (6.7) | 0.46% | — | 13 jun 2019 | Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Intel® Trusted Execution Engine Firmware before version 3.1.55 may allow a… |
| CVE-2019-0170 | Media (6.7) | 0.41% | — | 17 may 2019 | Buffer overflow in subsystem in Intel(R) DAL before version 12.0.35 may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2019-0153 | Crítica (9.8) | 1.9% | — | 17 may 2019 | Buffer overflow in subsystem in Intel(R) CSME 12.0.0 through 12.0.34 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2019-0098 | Media (6.8) | 0.47% | — | 17 may 2019 | Logic bug vulnerability in subsystem for Intel(R) CSME before version 12.0.35, Intel(R) TXE before 3.1.65, 4.0.15 may allow an unauthenticated user to potentially enable escalation of privilege via physical access. |
| CVE-2019-0086 | Alta (7.8) | 0.36% | — | 17 may 2019 | Insufficient access control vulnerability in Dynamic Application Loader software for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to… |
| CVE-2018-12208 | Alta (7.6) | 0.51% | — | 14 mar 2019 | Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4.0.10, or Intel(R) Server Platform Services before version 5.00.04.012… |
| CVE-2018-12199 | Media (6.2) | 0.49% | — | 14 mar 2019 | Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before 3.1.60 or 4.0.10 may allow a privileged user to potentially execute arbitrary code via… |
Otros productos de Intel
Graphics Driver · 73Active Management Technology Firmware · 54Proset/wireless Wifi · 52Quartus Prime · 44Graphics Drivers · 43Core I7-10710u Firmware · 43Core I7-10510u Firmware · 42Core I7-8665u Firmware · 42Core I7-10510y Firmware · 42Core I9-9900k Firmware · 42Core I7-8565u Firmware · 41Core I7-8706g Firmware · 41