Intel Converged Security Management Engine vulnerabilities, page 3

44 vulnerabilities

Known vulnerabilities in Intel Converged Security Management Engine, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2019-0086intelconverged_security_management_engine_firmware+1
EPSS score
0.36%
Insufficient access control vulnerability in Dynamic Application Loader software for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access.4.4CVE-2019-0168intelconverged_security_management_engine_firmware+1
EPSS score
0.35%
Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45 and 13.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access.7.2CVE-2019-0098intelconverged_security_management_engine_firmware+1
EPSS score
0.47%
Logic bug vulnerability in subsystem for Intel(R) CSME before version 12.0.35, Intel(R) TXE before 3.1.65, 4.0.15 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.6.7CVE-2019-14598intelconverged_security_management_engine_firmware+1
EPSS score
0.45%
Improper Authentication in subsystem in Intel(R) CSME versions 12.0 through 12.0.48 (IOT only: 12.0.56), versions 13.0 through 13.0.20, versions 14.0 through 14.0.10 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access.