Converged Security Management Engine Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2019-12-18	CVE-2019-0169	Out-of-bounds Write vulnerability in Intel products Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an unauthenticated user to potentially enable escalation of privileges, information disclosure or denial of service via adjacent access. low complexity intel CWE-787	5.8
2019-12-18	CVE-2019-0168	Improper Input Validation vulnerability in Intel products Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45 and 13.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access. local low complexity intel CWE-20	2.1
2019-12-18	CVE-2019-0165	Improper Input Validation vulnerability in Intel Converged Security Management Engine Firmware Insufficient Input validation in the subsystem for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a privileged user to potentially enable denial of service via local access. local low complexity intel CWE-20	2.1
2019-06-13	CVE-2018-12147	Improper Input Validation vulnerability in Intel products Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Intel® Trusted Execution Engine Firmware before version 3.1.55 may allow a privileged user to potentially enable escalation of privileges via local access. local low complexity intel CWE-20	7.2
2019-05-17	CVE-2019-0170	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Intel Converged Security Management Engine Firmware 12.0.5 Buffer overflow in subsystem in Intel(R) DAL before version 12.0.35 may allow a privileged user to potentially enable escalation of privilege via local access. local low complexity intel CWE-119	4.6
2019-05-17	CVE-2019-0153	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Intel Converged Security Management Engine Firmware 12.0.5 Buffer overflow in subsystem in Intel(R) CSME 12.0.0 through 12.0.34 may allow an unauthenticated user to potentially enable escalation of privilege via network access. network low complexity intel CWE-119	7.5
2019-05-17	CVE-2019-0098	Unspecified vulnerability in Intel products Logic bug vulnerability in subsystem for Intel(R) CSME before version 12.0.35, Intel(R) TXE before 3.1.65, 4.0.15 may allow an unauthenticated user to potentially enable escalation of privilege via physical access. local low complexity intel	7.2
2019-05-17	CVE-2019-0086	Incorrect Permission Assignment for Critical Resource vulnerability in Intel products Insufficient access control vulnerability in Dynamic Application Loader software for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access. local low complexity intel CWE-732	4.6
2019-03-14	CVE-2018-12208	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Intel products Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4.0.10, or Intel(R) Server Platform Services before version 5.00.04.012 may allow an unauthenticated user to potentially execute arbitrary code via physical access. local low complexity intel CWE-119	4.6
2019-03-14	CVE-2018-12199	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Intel products Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before 3.1.60 or 4.0.10 may allow a privileged user to potentially execute arbitrary code via physical access. local low complexity intel CWE-119	7.2