Converged Security Management Engine Firmware

converged_security_management_engine_firmware

Vendor: Intel • 44 CVEs

CVEs (44)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-3655 1Intel 3Converged Security Management Engine Firmware Server Platform Services FirmwareTrusted Execution Engine Firmware Nov 21, 2024 Sep 12, 2018 N/A· v4 7.3 HIGH· v3 3.6 LOW· v2 A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user...Show more A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access.Show less
CVE-2018-3643 1Intel 2Converged Security Management Engine Firmware Server Platform Services Firmware Nov 21, 2024 Sep 12, 2018 N/A· v4 8.2 HIGH· v3 4.6 MEDIUM· v2 A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) before version 11.8.55, 11.11.55, 11.21.55, 12.0.6 or Intel(R) Server Platform Se...Show more A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) before version 11.8.55, 11.11.55, 11.21.55, 12.0.6 or Intel(R) Server Platform Services firmware before version 4.x.04 may allow an attacker with administrative privileges to uncover certain platform secrets via local access or to potentially execute arbitrary code.Show less
CVE-2018-3616 2Intel Siemens 14Active Management Technology Firmware Converged Security Management Engine FirmwareManageability Engine Firmware+11 more Nov 21, 2024 Sep 12, 2018 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.
CVE-2018-3627 2Intel Netapp 2Converged Security Management Engine Firmware Element Software Management Node Nov 21, 2024 Jul 10, 2018 N/A· v4 8.2 HIGH· v3 4.6 MEDIUM· v2 Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local privileged access.

Previous 1 23