Input validation

2019-12-1822:15:00

PRIOn knowledge base

www.prio-n.com

4.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

Insufficient input validation in the subsystem for Intel® CSME before versions 11.8.70, 12.0.45 and 13.0.10; Intel® TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access.

CPENameOperatorVersion
converged_security_management_engine_firmwarege12.0
converged_security_management_engine_firmwarelt12.0.45
converged_security_management_engine_firmwarege11.0
converged_security_management_engine_firmwarelt11.8.70
converged_security_management_engine_firmwarege13.0
converged_security_management_engine_firmwarelt13.0.10
trusted_execution_engine_firmwarege4.0
trusted_execution_engine_firmwarelt4.0.20
trusted_execution_engine_firmwarege3.0
trusted_execution_engine_firmwarelt3.1.70

Name	Operator	Version
converged_security_management_engine_firmware	ge	12.0
converged_security_management_engine_firmware	lt	12.0.45
converged_security_management_engine_firmware	ge	11.0
converged_security_management_engine_firmware	lt	11.8.70
converged_security_management_engine_firmware	ge	13.0
converged_security_management_engine_firmware	lt	13.0.10
trusted_execution_engine_firmware	ge	4.0
trusted_execution_engine_firmware	lt	4.0.20
trusted_execution_engine_firmware	ge	3.0
trusted_execution_engine_firmware	lt	3.1.70