Vulnerabilities > Intel > Converged Security AND Manageability Engine > 11.22.86

DATE CVE VULNERABILITY TITLE RISK
2022-11-11 CVE-2022-26047 Improper Input Validation vulnerability in Intel products
Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products may allow unauthenticated user to potentially enable denial of service via local access.
low complexity
intel CWE-20
6.5
2021-06-09 CVE-2020-24506 Out-of-bounds Read vulnerability in multiple products
Out of bound read in a subsystem in the Intel(R) CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32 may allow a privileged user to potentially enable information disclosure via local access.
local
low complexity
intel siemens CWE-125
2.1
2021-06-09 CVE-2020-24507 Improper Initialization vulnerability in multiple products
Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may allow a privileged user to potentially enable information disclosure via local access.
local
low complexity
intel siemens CWE-665
2.1
2021-06-09 CVE-2020-24516 Unspecified vulnerability in Intel Converged Security and Manageability Engine
Modification of assumed-immutable data in subsystem in Intel(R) CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
local
low complexity
intel
4.6
2021-06-09 CVE-2020-8703 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a privileged user to potentially enable escalation of privilege via local access.
local
low complexity
intel netapp siemens CWE-119
4.6