Intel Trusted_execution_engine_firmware
27 CVEs affecting Intel Trusted_execution_engine_firmware. Latest disclosed: 2020-06-15. Critical: 0, High: 11.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-0169 | High | 8.8 | 2019-12-18 | Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an u… |
CVE-2019-11147 | High | 7.8 | 2019-12-18 | Insufficient access control in hardware abstraction driver for MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0… |
CVE-2019-11104 | High | 7.8 | 2019-12-18 | Insufficient input validation in MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE befo… |
CVE-2019-11097 | High | 7.8 | 2019-12-18 | Improper directory permissions in the installer for Intel(R) Management Engine Consumer Driver for Windows before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45… |
CVE-2019-0086 | High | 7.8 | 2019-05-17 | Insufficient access control vulnerability in Dynamic Application Loader software for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Int… |
CVE-2017-5710 | High | 7.8 | 2017-11-21 | Multiple privilege escalations in kernel in Intel Trusted Execution Engine Firmware 3.0 allows unauthorized process to access privileged content via unspecifie… |
CVE-2017-5707 | High | 7.8 | 2017-11-21 | Multiple buffer overflows in kernel in Intel Trusted Execution Engine Firmware 3.0 allow attacker with local access to the system to execute arbitrary code. |
CVE-2018-12208 | High | 7.6 | 2019-03-14 | Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4.0.10, or… |
CVE-2018-12191 | High | 7.6 | 2019-03-14 | Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versions 4.00… |
CVE-2020-0536 | High | 7.5 | 2020-06-15 | Improper input validation in the DAL subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and Intel(R) TXE version… |
CVE-2018-3655 | High | 7.3 | 2018-09-12 | A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firm… |
CVE-2020-0566 | Medium | 6.8 | 2020-06-15 | Improper Access Control in subsystem for Intel(R) TXE versions before 3.175 and 4.0.25 may allow an unauthenticated user to potentially enable escalation of pr… |
CVE-2019-0098 | Medium | 6.8 | 2019-05-17 | Logic bug vulnerability in subsystem for Intel(R) CSME before version 12.0.35, Intel(R) TXE before 3.1.65, 4.0.15 may allow an unauthenticated user to potentia… |
CVE-2018-3659 | Medium | 6.8 | 2018-09-12 | A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to… |
CVE-2019-11110 | Medium | 6.7 | 2019-12-18 | Authentication bypass in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before version… |
CVE-2019-11106 | Medium | 6.7 | 2019-12-18 | Insufficient session validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 a… |
CVE-2019-11087 | Medium | 6.7 | 2019-12-18 | Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before… |
CVE-2018-12147 | Medium | 6.7 | 2019-06-13 | Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Intel® Trusted… |
CVE-2018-12190 | Medium | 6.7 | 2019-03-14 | Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel(r) TXE before 3.1.60 or 4.0.10 may all… |
CVE-2018-12199 | Medium | 6.2 | 2019-03-14 | Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before 3.1.60 or 4.0.10 may allow… |