Design/Logic Flaw

2018-09-1219:29:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

67.9%

JSON

A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access.

CPENameOperatorVersion
converged_security_management_engine_firmwarege11.20
converged_security_management_engine_firmwarele11.21.51
converged_security_management_engine_firmwarege11.10
converged_security_management_engine_firmwarele11.11.50
converged_security_management_engine_firmwarege11.0
converged_security_management_engine_firmwarele11.8.50
server_platform_services_firmwarelt4.0
trusted_execution_engine_firmwarege3.0
trusted_execution_engine_firmwarele3.1.50

Name	Operator	Version
converged_security_management_engine_firmware	ge	11.20
converged_security_management_engine_firmware	le	11.21.51
converged_security_management_engine_firmware	ge	11.10
converged_security_management_engine_firmware	le	11.11.50
converged_security_management_engine_firmware	ge	11.0
converged_security_management_engine_firmware	le	11.8.50
server_platform_services_firmware	lt	4.0
trusted_execution_engine_firmware	ge	3.0
trusted_execution_engine_firmware	le	3.1.50