18 results (0.015 seconds)

CVSS: 7.8EPSS: 0%CPEs: 569EXPL: 0

CVE-2022-29871

https://notcve.org/view.php?id=CVE-2022-29871

11 Aug 2023 — Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Un control de acceso inadecuado en el instalador del software Intel(R) CSME anterior a la versión 2239.3.7.0 puede permitir que un usuario autenticado habilite potencialmente una escalada de privilegios mediante acceso local. • http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00783.html • CWE-284: Improper Access Control CWE-863: Incorrect Authorization •

CVSS: 7.2EPSS: 0%CPEs: 99EXPL: 0

CVE-2022-38102

https://notcve.org/view.php?id=CVE-2022-38102

11 Aug 2023 — Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may allow a privileged user to potentially enable denial of service via local access. La validación de entrada inadecuada en el firmware de algunos Intel(R) Converged Security and Management Engine anteriores a las versiones 15.0.45 y 16.1.27 puede permitir que un usuario con privilegios habilite potencialmente la denegación de servicio mediante acceso local. • http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00783.html • CWE-20: Improper Input Validation •

CVSS: 8.6EPSS: 0%CPEs: 201EXPL: 0

CVE-2022-36392

https://notcve.org/view.php?id=CVE-2022-36392

11 Aug 2023 — Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel (R) CSME may allow an unauthenticated user to potentially enable denial of service via network access. La validación de entrada inadecuada en algunos firmware para Intel(R) AMT e Intel(R) Standard Manageability antes de las versiones 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45 y 16.1.27 en Intel (R) CSME puede ... • http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00783.html • CWE-20: Improper Input Validation CWE-116: Improper Encoding or Escaping of Output •

CVSS: 5.5EPSS: 0%CPEs: 8EXPL: 0

CVE-2020-0539

https://notcve.org/view.php?id=CVE-2020-0539

15 Jun 2020 — Path traversal in subsystem for Intel(R) DAL software for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 and Intel(R) TXE versions before 3.1.75, 4.0.25 may allow an unprivileged user to potentially enable denial of service via local access. Un salto de ruta en el subsistema para el software Intel® DAL para Intel® CSME versiones anteriores a 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 e Intel® TXE versiones anteriores 3.1.75, 4.0.25, puede permitir a un usuar... • https://security.netapp.com/advisory/ntap-20200611-0006 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 7.5EPSS: 0%CPEs: 8EXPL: 0

CVE-2020-0536

https://notcve.org/view.php?id=CVE-2020-0536

15 Jun 2020 — Improper input validation in the DAL subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and Intel(R) TXE versions before 3.1.75 and 4.0.25 may allow an unauthenticated user to potentially enable information disclosure via network access. Una comprobación de entrada inapropiada en el subsistema DAL para Intel® CSME versiones anteriores a 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 e Intel® TXE versiones anteriores a 3.1.75 y 4.0.25, puede permitir a un... • https://security.netapp.com/advisory/ntap-20200611-0006 • CWE-20: Improper Input Validation •

CVSS: 6.7EPSS: 0%CPEs: 4EXPL: 0

CVE-2020-0541

https://notcve.org/view.php?id=CVE-2020-0541

15 Jun 2020 — Out-of-bounds write in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow a privileged user to potentially enable escalation of privilege via local access. Una escritura fuera de límites en el subsistema para Intel® CSME versiones anteriores a 12.0.64, 13.0.32, 14.0.33 y 14.5.12, puede permitir a un usuario privilegiado habilitar una escalada de privilegios por medio de un acceso local • https://security.netapp.com/advisory/ntap-20200611-0006 • CWE-787: Out-of-bounds Write •

CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2020-0534

https://notcve.org/view.php?id=CVE-2020-0534

15 Jun 2020 — Improper input validation in the DAL subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an unauthenticated user to potentially enable denial of service via network access. Una comprobación de entrada inapropiada en el subsistema DAL para Intel® CSME versiones anteriores a 12.0.64, 13.0.32, 14.0.33 y 14.5.12, puede permitir a un usuario no autenticado habilitar potencialmente una denegación de servicio por medio de un acceso de red • https://security.netapp.com/advisory/ntap-20200611-0006 • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 7EXPL: 0

CVE-2020-0542

https://notcve.org/view.php?id=CVE-2020-0542

15 Jun 2020 — Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access. Unas restricciones de búfer inapropiadas en el subsistema para Intel® CSME versiones anteriores a 12.0.64, 13.0.32, 14.0.33 y 14.5.12, pueden permitir a un usuario autenticado habilitar potencialmente una escalada de privilegios, una divulgación de informac... • https://security.netapp.com/advisory/ntap-20200611-0006 •

CVSS: 6.7EPSS: 0%CPEs: 5EXPL: 0

CVE-2019-14598

https://notcve.org/view.php?id=CVE-2019-14598

13 Feb 2020 — Improper Authentication in subsystem in Intel(R) CSME versions 12.0 through 12.0.48 (IOT only: 12.0.56), versions 13.0 through 13.0.20, versions 14.0 through 14.0.10 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access. Se presenta una Autenticación Inapropiada en subsystem en Intel® CSME versiones 12.0 hasta 12.0.48 (solo IOT: versión 12.0.56), versiones 13.0 hasta 13.0.20, versiones 14.0 hasta 14.0.10, pueden habilitar a un... • https://security.netapp.com/advisory/ntap-20200221-0005 • CWE-287: Improper Authentication •

CVSS: 6.7EPSS: 0%CPEs: 8EXPL: 0

CVE-2019-11110

https://notcve.org/view.php?id=CVE-2019-11110

18 Dec 2019 — Authentication bypass in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access. Una omisión de autenticación en el subsistema para Intel(R) CSME versiones anteriores a 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 y 14.0.10; Intel(R) TXE versiones anteriores a 3.1.70 y 4.0.20, puede permitir a un usuario privilegiado ha... • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html •