Converged Security And Manageability Engine

converged_security_and_manageability_engine

Vendor: Intel • 12 CVEs

CVEs (12)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-26047 1Intel 342Converged Security And Manageability Engine Core I3 1000g1 FirmwareCore I3 1000g4 Firmware+339 more Jun 17, 2026 Nov 11, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products may allow unauthenticated user to potentially enable denial of service via local access.
CVE-2020-8703 3Intel NetappSiemens 14Cloud Backup Converged Security And Manageability EngineSimatic Field Pg M5 Firmware+11 more Jun 17, 2026 Jun 9, 2021 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a privileged user to potentially enable esc...Show more Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a privileged user to potentially enable escalation of privilege via local access.Show less
CVE-2020-24516 1Intel 1Converged Security And Manageability Engine Jun 17, 2026 Jun 9, 2021 N/A· v4 6.8 MEDIUM· v3 4.6 MEDIUM· v2 Modification of assumed-immutable data in subsystem in Intel(R) CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may allow an unauthenticated user to potentially enable escalation of privilege via physic...Show more Modification of assumed-immutable data in subsystem in Intel(R) CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.Show less
CVE-2020-24507 2Intel Siemens 13Converged Security And Manageability Engine Simatic Field Pg M5 FirmwareSimatic Field Pg M6 Firmware+10 more Jun 17, 2026 Jun 9, 2021 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may allow a privileged user to potentially enabl...Show more Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may allow a privileged user to potentially enable information disclosure via local access.Show less
CVE-2020-24506 2Intel Siemens 6Converged Security And Manageability Engine Simatic Field Pg M6 FirmwareSimatic Ipc627e Firmware+3 more Jun 17, 2026 Jun 9, 2021 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 Out of bound read in a subsystem in the Intel(R) CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32 may allow a privileged user to potentially enable information disclosure via local access.
CVE-2020-8761 1Intel 1Converged Security And Manageability Engine Jun 17, 2026 Nov 12, 2020 N/A· v4 4.6 MEDIUM· v3 2.1 LOW· v2 Inadequate encryption strength in subsystem for Intel(R) CSME versions before 13.0.40 and 13.30.10 may allow an unauthenticated user to potentially enable information disclosure via physical access.
CVE-2020-8756 1Intel 1Converged Security And Manageability Engine Jun 17, 2026 Nov 12, 2020 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 Improper input validation in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2020-8751 1Intel 2Converged Security And Manageability Engine Trusted Execution Technology Jun 17, 2026 Nov 12, 2020 N/A· v4 4.6 MEDIUM· v3 2.1 LOW· v2 Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, Intel(R) TXE versions before 3.1.80 may allow an unauthenticated user to potentially enable information disclosure via physical...Show more Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, Intel(R) TXE versions before 3.1.80 may allow an unauthenticated user to potentially enable information disclosure via physical access.Show less
CVE-2020-8745 2Intel Siemens 22Converged Security And Manageability Engine Simatic Drive Controller FirmwareSimatic Et200sp 1515sp Pc2 Firmware+19 more Jun 17, 2026 Nov 12, 2020 N/A· v4 6.8 MEDIUM· v3 4.6 MEDIUM· v2 Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow...Show more Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.Show less
CVE-2020-8705 1Intel 3Converged Security And Manageability Engine Server Platform ServicesTrusted Execution Technology Jun 17, 2026 Nov 12, 2020 N/A· v4 6.8 MEDIUM· v3 4.6 MEDIUM· v2 Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 3.1.80 and 4....Show more Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 3.1.80 and 4.0.30, Intel(R) SPS versions before E5_04.01.04.400, E3_04.01.04.200, SoC-X_04.00.04.200 and SoC-A_04.00.04.300 may allow an unauthenticated user to potentially enable escalation of privileges via physical access.Show less
CVE-2020-12303 1Intel 2Converged Security And Manageability Engine Trusted Execution Technology Jun 17, 2026 Nov 12, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially e...Show more Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access.Show less
CVE-2020-12297 1Intel 2Converged Security And Manageability Engine Trusted Execution Technology Jun 17, 2026 Nov 12, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Improper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel TXE 3.1.80, 4.0.30 may allow an authenticated...Show more Improper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access.Show less