Intel(R) CSME
19 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-34424 | See references | Improper input validation in firmware for some Intel(R) CSME may allow a privileged user to potentially enable denial of service via local a | MEDIUM 6.7 | 0.2 % | ||
| CVE-2024-21844 | See references | Integer overflow in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable denial of service via adjacent a | MEDIUM 5.3 | 0.3 % | ||
| CVE-2023-48361 | See references | Improper initialization in firmware for some Intel(R) CSME may allow a privileged user to potentially enable information disclosure via loca | MEDIUM 4.6 | 0.2 % | ||
| CVE-2023-40067 | See references | Unchecked return value in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable escalation of privilege vi | MEDIUM 5.7 | 0.2 % | ||
| CVE-2020-8761 | versions before 13.0.40 and 13.30.10 | Inadequate encryption strength in subsystem for Intel(R) CSME versions before 13.0.40 and 13.30.10 may allow an unauthenticated user to pote | MEDIUM 4.6 | 0.2 % | ||
| CVE-2020-8756 | versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 | Improper input validation in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privil | MEDIUM 6.7 | 0.4 % | ||
| CVE-2020-0536 | See provided reference | Improper input validation in the DAL subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and I | HIGH 7.5 | 1.7 % | ||
| CVE-2020-0541 | See provided reference | Out-of-bounds write in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow a privileged user to pote | MEDIUM 6.7 | 0.4 % | ||
| CVE-2020-0533 | See provided reference | Reversible one-way hash in Intel(R) CSME versions before 11.8.76, 11.12.77 and 11.22.77 may allow a privileged user to potentially enable es | MEDIUM 6.7 | 0.2 % | ||
| CVE-2020-0534 | See provided reference | Improper input validation in the DAL subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an unauthen | HIGH 7.5 | 1.9 % | ||
| CVE-2020-0542 | See provided reference | Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated | HIGH 7.8 | 0.4 % | ||
| CVE-2019-14598 | versions 12.0 through 12.0.48 (IOT only: 12.0.56), versions 13.0 through 13.0.20, versions 14.0 through 14.0.10 | Improper Authentication in subsystem in Intel(R) CSME versions 12.0 through 12.0.48 (IOT only: 12.0.56), versions 13.0 through 13.0.20, vers | MEDIUM 6.7 | 0.5 % | ||
| CVE-2019-11108 | See provided reference | Insufficient input validation in subsystem for Intel(R) CSME before versions 12.0.45 and 13.0.10 may allow a privileged user to potentially | MEDIUM 6.7 | 0.4 % | ||
| CVE-2019-11106 | See provided reference | Insufficient session validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE befor | MEDIUM 6.7 | 0.3 % | ||
| CVE-2019-0165 | See provided reference | Insufficient Input validation in the subsystem for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a privileged user to | MEDIUM 4.4 | 0.3 % | ||
| CVE-2019-11103 | See provided reference | Insufficient input validation in firmware update software for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow an authent | HIGH 7.8 | 0.4 % | ||
| CVE-2019-11104 | See provided reference | Insufficient input validation in MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10 | HIGH 7.8 | 0.4 % | ||
| CVE-2019-11105 | See provided reference | Logic issue in subsystem for Intel(R) CSME before versions 12.0.45, 13.0.10 and 14.0.10 may allow a privileged user to potentially enable es | MEDIUM 6.7 | 0.4 % | ||
| CVE-2019-11147 | See provided reference | Insufficient access control in hardware abstraction driver for MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70 | HIGH 7.8 | 0.4 % |