Priority LOW 34
Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially e…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00369 · Published 2020-11-12 · No fix listed CWE-416
Priority LOW 34
Improper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel TXE 3.1.80, 4.0.30 may allow an authenticated…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00449 · Published 2020-11-12 · No fix listed
Priority LOW 31
Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 3.1.80 and 4.…
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00504 · Published 2020-11-12 · No fix listed CWE-1188
Priority LOW 30
Modification of assumed-immutable data in subsystem in Intel(R) CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may allow an unauthenticated user to potentially enable escalation of privilege via physic…
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00267 · Published 2021-06-09 · No fix listed
Priority LOW 30
Improper input validation in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00351 · Published 2020-11-12 · No fix listed CWE-20
Priority LOW 30
Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow…
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00383 · Published 2020-11-12 · No fix listed
Priority LOW 30
Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a privileged user to potentially enable esc…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00333 · Published 2021-06-09 · No fix listed CWE-119
Priority LOW 29
Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products may allow unauthenticated user to potentially enable denial of service via local access.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00427 · Published 2022-11-11 · No fix listed CWE-1284
Priority LOW 21
Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, Intel(R) TXE versions before 3.1.80 may allow an unauthenticated user to potentially enable information disclosure via physical…
CVSS 3.1MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00413 · Published 2020-11-12 · No fix listed
Priority LOW 20
Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may allow a privileged user to potentially enabl…
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00284 · Published 2021-06-09 · No fix listed CWE-665
Priority LOW 20
Out of bound read in a subsystem in the Intel(R) CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32 may allow a privileged user to potentially enable information disclosure via local access.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00284 · Published 2021-06-09 · No fix listed CWE-125
Priority LOW 20
Inadequate encryption strength in subsystem for Intel(R) CSME versions before 13.0.40 and 13.30.10 may allow an unauthenticated user to potentially enable information disclosure via physical access.
CVSS 3.1MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00155 · Published 2020-11-12 · No fix listed CWE-326