Converged Security AND Management Engine

DATE	CVE	VULNERABILITY TITLE	RISK
2020-11-12	CVE-2020-8755	Race Condition vulnerability in Intel products Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and E3_05.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access. local intel CWE-362	4.4
2020-11-12	CVE-2020-8744	Improper Initialization vulnerability in multiple products Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions before E3_05.01.04.200 may allow a privileged user to potentially enable escalation of privilege via local access. local low complexity intel siemens CWE-665	7.8
2019-05-17	CVE-2019-0093	Unspecified vulnerability in Intel Converged Security and Management Engine Insufficient data sanitization vulnerability in HECI subsystem for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow a privileged user to potentially enable information disclosure via local access. local low complexity intel	2.1
2019-05-17	CVE-2019-0091	Code Injection vulnerability in Intel products Code injection vulnerability in installer for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access. local low complexity intel CWE-94	7.2
2019-05-17	CVE-2019-0090	Unspecified vulnerability in Intel products Insufficient access control vulnerability in subsystem for Intel(R) CSME before versions 11.x, 12.0.35 Intel(R) TXE 3.x, 4.x, Intel(R) Server Platform Services 3.x, 4.x, Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow an unauthenticated user to potentially enable escalation of privilege via physical access. local intel	4.4