Intel Converged Security Management Engine Firmware vulnerabilities

• intel converged security management engine firmware Unchecked return value in firmware for some Intel(R) CSME may allow an unauthenticated user to... CVE-2023-40067 5.7 MediumAugust 14, 2024
• intel converged security management engine firmware Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine... CVE-2022-38102 7.2 HighAugust 11, 2023
• intel csme software installer csme software installer, intel converged security management engine firmware +1 more Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may... CVE-2022-29871 6.7 MediumAugust 11, 2023
• intel converged security management engine firmware, intel and intel standard manageability in intel csme and intel standard manageability in intel csme +1 more Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability... CVE-2022-36392 8.6 HighAugust 11, 2023
• intel converged security management engine firmware, trusted execution engine firmware +1 more Path traversal in subsystem for Intel(R) DAL software for Intel(R) CSME versions before 11.8.77,... CVE-2020-0539 5.5 MediumJune 15, 2020
• intel server platform services, converged security management engine firmware, trusted execution engine +2 more Integer overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and... CVE-2020-0545 4.4 MediumJune 15, 2020
• intel converged security management engine firmware, trusted execution engine firmware +1 more Improper input validation in the DAL subsystem for Intel(R) CSME versions before 11.8.77, 11.12... CVE-2020-0536 7.5 HighJune 15, 2020
• intel converged security management engine firmware Out-of-bounds write in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and... CVE-2020-0541 6.7 MediumJune 15, 2020
• intel converged security management engine firmware Reversible one-way hash in Intel(R) CSME versions before 11.8.76, 11.12.77 and 11.22.77 may allow... CVE-2020-0533 6.7 MediumJune 15, 2020
• intel converged security management engine firmware Improper input validation in the DAL subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32... CVE-2020-0534 7.5 HighJune 15, 2020
• intel converged security management engine firmware Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14... CVE-2020-0542 7.8 HighJune 15, 2020
• intel converged security management engine firmware, netapp steelstore cloud integrated storage +1 more Improper Authentication in subsystem in Intel(R) CSME versions 12.0 through 12.0.48 (IOT only: 12... CVE-2019-14598 6.7 MediumFebruary 13, 2020
• intel converged security management engine firmware Insufficient input validation in subsystem for Intel(R) CSME before versions 12.0.45 and 13.0.10... CVE-2019-11108 6.7 MediumDecember 18, 2019
• intel converged security management engine firmware, trusted execution engine firmware +1 more Authentication bypass in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22... CVE-2019-11110 6.7 MediumDecember 18, 2019
• intel converged security management engine firmware, trusted execution engine firmware +1 more Insufficient session validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0... CVE-2019-11106 6.7 MediumDecember 18, 2019
• intel converged security management engine firmware, trusted execution engine firmware +1 more Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11... CVE-2019-11101 4.4 MediumDecember 18, 2019
• intel converged security management engine firmware, trusted execution engine firmware +1 more Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11... CVE-2019-11087 6.7 MediumDecember 18, 2019
• intel converged security management engine firmware, trusted execution engine firmware +1 more Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45... CVE-2019-0168 4.4 MediumDecember 18, 2019
• intel converged security management engine firmware Insufficient Input validation in the subsystem for Intel(R) CSME before versions 12.0.45,13.0.10... CVE-2019-0165 4.4 MediumDecember 18, 2019
• intel converged security management engine firmware Insufficient input validation in firmware update software for Intel(R) CSME before versions 12.0... CVE-2019-11103 7.8 HighDecember 18, 2019
• intel converged security management engine firmware, trusted execution engine firmware +1 more Insufficient input validation in MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11... CVE-2019-11104 7.8 HighDecember 18, 2019
• intel converged security management engine firmware Logic issue in subsystem for Intel(R) CSME before versions 12.0.45, 13.0.10 and 14.0.10 may allow... CVE-2019-11105 6.7 MediumDecember 18, 2019
• intel intel-sa-00125 detection tool, sa-00086 detection tool, converged security management engine firmware +1 more +3 more Insufficient access control in hardware abstraction driver for MEInfo software for Intel(R) CSME... CVE-2019-11147 7.8 HighDecember 18, 2019
• intel converged security management engine firmware, trusted execution engine firmware +1 more Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45;... CVE-2019-0169 8.8 HighDecember 18, 2019
• intel trusted execution engine firmware, converged security management engine firmware, server platform services firmware +2 more Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel?... CVE-2018-12147 6.7 MediumJune 13, 2019
• intel converged security management engine firmware Buffer overflow in subsystem in Intel(R) DAL before version 12.0.35 may allow a privileged user... CVE-2019-0170 6.7 MediumMay 17, 2019
• intel converged security management engine firmware Buffer overflow in subsystem in Intel(R) CSME before version 12.0.35 may allow an unauthenticated... CVE-2019-0153 9.8 CriticalMay 17, 2019
• intel converged security management engine firmware, trusted execution engine firmware +1 more Logic bug vulnerability in subsystem for Intel(R) CSME before version 12.0.35, Intel(R) TXE... CVE-2019-0098 6.8 MediumMay 17, 2019
• intel converged security management engine firmware, trusted execution engine firmware +1 more Insufficient access control vulnerability in Dynamic Application Loader software for Intel(R)... CVE-2019-0086 7.8 HighMay 17, 2019
• intel converged security management engine firmware, server platform services firmware, trusted execution engine firmware +1 more +3 more Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or... CVE-2018-12208 7.6 HighMarch 14, 2019
• intel converged security management engine firmware, trusted execution engine firmware, intel corporation intel(r) csme, server platform services, trusted execution engine and intel(r) active management technology +2 more Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or... CVE-2018-12199 6.2 MediumMarch 14, 2019
• intel converged security management engine firmware, intel corporation intel(r) csme, server platform services, trusted execution engine and intel(r) active management technology +1 more Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60,... CVE-2018-12196 6.7 MediumMarch 14, 2019
• intel converged security management engine firmware, server platform services firmware, intel corporation intel(r) csme, server platform services, trusted execution engine and intel(r) active management technology +2 more Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20... CVE-2018-12192 6.8 MediumMarch 14, 2019
• intel converged security management engine firmware, server platform services firmware, trusted execution engine firmware +1 more +3 more Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0... CVE-2018-12191 7.6 HighMarch 14, 2019
• intel converged security management engine firmware, trusted execution engine firmware, intel corporation intel(r) csme, server platform services, trusted execution engine and intel(r) active management technology +2 more Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22... CVE-2018-12190 6.7 MediumMarch 14, 2019
• intel converged security management engine firmware, trusted execution engine firmware, intel corporation intel(r) csme, server platform services, trusted execution engine and intel(r) active management technology +2 more Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11... CVE-2018-12189 4.4 MediumMarch 14, 2019
• intel converged security management engine firmware, trusted execution engine firmware, intel corporation intel(r) csme, server platform services, trusted execution engine and intel(r) active management technology +2 more Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0... CVE-2018-12188 4.6 MediumMarch 14, 2019
• intel converged security management engine firmware, intel corporation intel(r) csme, server platform services, trusted execution engine and intel(r) active management technology +1 more Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60,... CVE-2018-12185 6.8 MediumMarch 14, 2019
• intel converged security management engine firmware, trusted execution engine firmware, intel corporation intel(r) platform trust technology (ptt) +2 more A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE... CVE-2018-3659 6.8 MediumSeptember 12, 2018
• intel active management technology firmware, converged security management engine firmware, manageability engine firmware +12 more +14 more Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an... CVE-2018-3658 5.3 MediumSeptember 12, 2018
• intel active management technology firmware, converged security management engine firmware, manageability engine firmware +12 more +14 more Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may... CVE-2018-3657 6.7 MediumSeptember 12, 2018
• intel trusted execution engine firmware, converged security management engine firmware, server platform services firmware +1 more +3 more A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform... CVE-2018-3655 7.3 HighSeptember 12, 2018
• intel server platform services firmware, converged security management engine firmware, intel corporation intel(r) converged security and management engine (csme) and intel(r) server platform services firmware +2 more A vulnerability in Power Management Controller firmware in systems using specific Intel(R)... CVE-2018-3643 8.2 HighSeptember 12, 2018
• intel active management technology firmware, converged security management engine firmware, manageability engine firmware +12 more +14 more Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management... CVE-2018-3616 5.9 MediumSeptember 12, 2018
• intel converged security management engine firmware, intel corporation converged security management engine (intel csme), netapp element software management node +2 more Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute... CVE-2018-3627 8.2 HighJuly 10, 2018