Trusted Execution Engine Firmware (Intel) - vulnerabilities (CVEs)

27 CVEs, 0 in the last 30 days, 13 known versions, newest CVE from 2020-06-15. Vendor: Intel.

CVEs of Trusted Execution Engine Firmware

• CVE-2020-0566 - CVSS 6.8 (medium), 2020-06-15: Improper Access Control in subsystem for Intel(R) TXE versions before 3.175 and 4.0.25 may allow an unauthenticated user to potentially enable escalation of…
• CVE-2020-0539 - CVSS 5.5 (medium), 2020-06-15: Path traversal in subsystem for Intel(R) DAL software for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 and Intel(R)…
• CVE-2020-0536 - CVSS 7.5 (high), 2020-06-15: Improper input validation in the DAL subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and Intel(R) TXE…
• CVE-2019-11110 - CVSS 6.7 (medium), 2019-12-18: Authentication bypass in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before…
• CVE-2019-11147 - CVSS 7.8 (high), 2019-12-18: Insufficient access control in hardware abstraction driver for MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0,…
• CVE-2019-11102 - CVSS 4.4 (medium), 2019-12-18: Insufficient input validation in Intel(R) DAL software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R)…
• CVE-2019-11087 - CVSS 6.7 (medium), 2019-12-18: Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE…
• CVE-2019-11101 - CVSS 4.4 (medium), 2019-12-18: Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE…
• CVE-2019-11106 - CVSS 6.7 (medium), 2019-12-18: Insufficient session validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70…
• CVE-2019-11097 - CVSS 7.8 (high), 2019-12-18: Improper directory permissions in the installer for Intel(R) Management Engine Consumer Driver for Windows before versions 11.8.70, 11.11.70, 11.22.70,…
• CVE-2019-11104 - CVSS 7.8 (high), 2019-12-18: Insufficient input validation in MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE…
• CVE-2019-11090 - CVSS 5.9 (medium), 2019-12-18: Cryptographic timing conditions in the subsystem for Intel(R) PTT before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0 and 14.0.10; Intel(R) TXE…
• CVE-2019-0169 - CVSS 8.8 (high), 2019-12-18: Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an…
• CVE-2019-0168 - CVSS 4.4 (medium), 2019-12-18: Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45 and 13.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20…
• CVE-2018-12147 - CVSS 6.7 (medium), 2019-06-13: Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Intel®…
• CVE-2019-0098 - CVSS 6.8 (medium), 2019-05-17: Logic bug vulnerability in subsystem for Intel(R) CSME before version 12.0.35, Intel(R) TXE before 3.1.65, 4.0.15 may allow an unauthenticated user to…
• CVE-2019-0086 - CVSS 7.8 (high), 2019-05-17: Insufficient access control vulnerability in Dynamic Application Loader software for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and…
• CVE-2018-12190 - CVSS 6.7 (medium), 2019-03-14: Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel(r) TXE before 3.1.60 or 4.0.10 may…
• CVE-2018-12208 - CVSS 7.6 (high), 2019-03-14: Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4.0.10, or…
• CVE-2018-12189 - CVSS 4.4 (medium), 2019-03-14: Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10…
• CVE-2018-12199 - CVSS 6.2 (medium), 2019-03-14: Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before 3.1.60 or 4.0.10 may…
• CVE-2018-12188 - CVSS 4.6 (medium), 2019-03-14: Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0.10 may allow an…
• CVE-2018-12191 - CVSS 7.6 (high), 2019-03-14: Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versions…
• CVE-2018-3659 - CVSS 6.8 (medium), 2018-09-12: A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user…
• CVE-2018-3655 - CVSS 7.3 (high), 2018-09-12: A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine…
• CVE-2017-5710 - CVSS 7.8 (high), 2017-11-21: Multiple privilege escalations in kernel in Intel Trusted Execution Engine Firmware 3.0 allows unauthorized process to access privileged content via…
• CVE-2017-5707 - CVSS 7.8 (high), 2017-11-21: Multiple buffer overflows in kernel in Intel Trusted Execution Engine Firmware 3.0 allow attacker with local access to the system to execute arbitrary code.