Converged Security And Manageability Engine vulnerabilities

Product

Converged Security And Manageability Engine

by Intel · last CVE Nov 11, 2022

CVEs

On KEV

7.8

Max CVSS

New 30D

Vulnerabilities12 In the news0 Timeline

Severity mix

Critical 0High 2Medium 10Low 0

Severity

All severities12 Critical0 High2 Medium10 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Converged Security And Manageability Engine to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-24516	6.8	0%	Jun 9	Modification of assumed-immutable data in subsystem in Intel(R) CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may allow an unauthenticated user to potentially… Affected: before 13.0.47; before 13.30.17; before 14.1.53; before 14.5.32; before 15.0.22
CVE-2020-8745	6.8	0%	Nov 12	Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE… Affected: before 11.8.80; 11.12.0 before 11.12.80; 11.22.0 before 11.22.80; 12.0 before 12.0.70; 14.0 before 14.0.45; 14.5.0 before 14.5.25
CVE-2020-8705	6.8	1%	Nov 12	Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25,… Affected: before 11.8.80; 11.12.0 before 11.12.80; 11.22.0 before 11.22.80; 12.0 before 12.0.70; 13.0 before 13.0.40; 13.30.0 before 13.30.10; +1 more
CVE-2020-8703	6.7	0%	Jun 9	Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a… Affected: before 12.0.81; before 13.0.47; before 13.30.17; before 14.1.53; before 14.5.32; before 11.8.86; +3 more
CVE-2020-8756	6.7	0%	Nov 12	Improper input validation in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable… Affected: before 11.8.80; 11.12.0 before 11.12.80; 11.22.0 before 11.22.80; 12.0 before 12.0.70; 14.0 before 14.0.45
CVE-2022-26047	6.5	0%	Nov 11	Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products may allow unauthenticated user to potentially enable denial… Affected: before 16.1.25.1885v2; before 16.1.25.1865v6.1; before 15.0.42.2235; before 14.1.67.2046; before 12.0.92.2145v3; before 12.0.92.2145v3
CVE-2020-8761	4.6	0%	Nov 12	Inadequate encryption strength in subsystem for Intel(R) CSME versions before 13.0.40 and 13.30.10 may allow an unauthenticated user to potentially enable information disclosure… Affected: before 13.0.40; 13.30.0 before 13.30.10
CVE-2020-8751	4.6	0%	Nov 12	Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, Intel(R) TXE versions before 3.1.80 may allow an unauthenticated user to potentially… Affected: before 11.8.80
CVE-2020-24507	4.4	0%	Jun 9	Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may… Affected: before 12.0.81; before 13.0.47; before 13.30.17; before 14.1.53; before 14.5.32; before 11.8.86; +4 more
CVE-2020-24506	4.4	0%	Jun 9	Out of bound read in a subsystem in the Intel(R) CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32 may allow a privileged user to potentially enable information… Affected: before 12.0.81; before 13.0.47; before 13.30.17; before 14.1.53; before 14.5.32