CVSS: 4.6EPSS: 0%CPEs: 2EXPL: 0CVE-2020-8751
https://notcve.org/view.php?id=CVE-2020-8751
12 Nov 2020 — Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, Intel(R) TXE versions before 3.1.80 may allow an unauthenticated user to potentially enable information disclosure via physical access. Una administración del flujo de control insuficiente en el subsistema para Intel® CSME versiones anteriores a 11.8.80, Intel® TXE versiones anteriores a 3.1.80, puede habilitar a un usuario no autenticado para permitir potencialmente una divulgación de información por medio de un ac... • https://security.netapp.com/advisory/ntap-20201113-0002 •
CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0CVE-2020-12303
https://notcve.org/view.php?id=CVE-2020-12303
12 Nov 2020 — Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access. Un uso de la memoria previamente liberada en el subsistema DAL para Intel® CSME versiones anteriores a 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 y 14.5.25, Intel® TXE versiones 3.1.80, 4.0.30 puede habilitar a un usuario... • https://security.netapp.com/advisory/ntap-20201113-0002 • CWE-416: Use After Free •
CVSS: 6.8EPSS: 1%CPEs: 13EXPL: 0CVE-2020-8705
https://notcve.org/view.php?id=CVE-2020-8705
12 Nov 2020 — Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 3.1.80 and 4.0.30, Intel(R) SPS versions before E5_04.01.04.400, E3_04.01.04.200, SoC-X_04.00.04.200 and SoC-A_04.00.04.300 may allow an unauthenticated user to potentially enable escalation of privileges via physical access. Una inicialización predeterminada no segura del resource en Intel® Boot Guard e... • https://security.netapp.com/advisory/ntap-20201113-0002 • CWE-1188: Initialization of a Resource with an Insecure Default •
CVSS: 6.8EPSS: 0%CPEs: 49EXPL: 0CVE-2020-8745
https://notcve.org/view.php?id=CVE-2020-8745
12 Nov 2020 — Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access. Una administración de flujo de control insuficiente en el subsistema para Intel® CSME versiones anteriores a 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 y 14.5.25, Intel® TXE versi... • https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf •
CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0CVE-2020-12297
https://notcve.org/view.php?id=CVE-2020-12297
12 Nov 2020 — Improper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access. Un control de acceso inapropiado en el Instalador para Intel® CSME Driver para Windows versiones anteriores a 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 y 14.5.25, Intel TXE versiones 3.1.80, 4.0.30, ... • https://security.netapp.com/advisory/ntap-20201113-0002 •
CVSS: 5.9EPSS: 0%CPEs: 13EXPL: 0CVE-2019-11090
https://notcve.org/view.php?id=CVE-2019-11090
18 Dec 2019 — Cryptographic timing conditions in the subsystem for Intel(R) PTT before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0 and 14.0.10; Intel(R) TXE 3.1.70 and 4.0.20; Intel(R) SPS before versions SPS_E5_04.01.04.305.0, SPS_SoC-X_04.00.04.108.0, SPS_SoC-A_04.00.04.191.0, SPS_E3_04.01.04.086.0, SPS_E3_04.08.04.047.0 may allow an unauthenticated user to potentially enable information disclosure via network access. Condiciones de sincronización criptográfica en el subsistema para Intel® PTT versiones anter... • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 7.8EPSS: 0%CPEs: 6EXPL: 0CVE-2019-0091
https://notcve.org/view.php?id=CVE-2019-0091
17 May 2019 — Code injection vulnerability in installer for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access. Vulnerabilidad de inyección de código en el instalador para Intel (R) CSME anterior a las versiones 11.8.65, 11.11.65, 11.22.65, 12.0.35 e Intel (R) TXE versiones 3.1.65, 4.0.15 puede permitir que un usuario sin privilegios habilite potencialmente un aumento de privilegio... • https://support.f5.com/csp/article/K21423526 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 7.8EPSS: 0%CPEs: 11EXPL: 0CVE-2013-5740
https://notcve.org/view.php?id=CVE-2013-5740
12 Sep 2013 — Unspecified vulnerability in the Intel Trusted Execution Technology (TXT) SINIT Authenticated Code Modules (ACM) before 1.2, as used by the Intel QM77, QS77, Q77 Express, C216, Q67 Express, C202, C204, and C206 chipsets and Mobile Intel QM67 and QS67 chipsets, when the measured launch environment (MLE) is invoked, allows local users to bypass the Trusted Execution Technology protection mechanism and perform other unspecified SINIT ACM functions via unspecified vectors. Vulnerabilidad no especificada en Inte... • http://support.citrix.com/article/CTX138633 •
CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 0CVE-2009-0066
https://notcve.org/view.php?id=CVE-2009-0066
07 Jan 2009 — Multiple unspecified vulnerabilities in Intel system software for Trusted Execution Technology (TXT) allow attackers to bypass intended loader integrity protections, as demonstrated by exploitation of tboot. NOTE: as of 20090107, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes. Múltiples vulnerabilidades sin especificar en Intel system software para Trusted Execution T... • http://blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Wojtczuk •