Buffer overflow

2021-06-0919:15:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Improper buffer restrictions in a subsystem in the Intel® CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a privileged user to potentially enable escalation of privilege via local access.

CPENameOperatorVersion
converged_security_and_manageability_enginelt12.0.81
converged_security_and_manageability_enginelt13.0.47
converged_security_and_manageability_enginelt13.30.17
converged_security_and_manageability_enginelt14.1.53
converged_security_and_manageability_enginelt14.5.32
converged_security_and_manageability_enginelt11.8.86
converged_security_and_manageability_enginelt11.12.86
converged_security_and_manageability_enginelt11.22.86
converged_security_and_manageability_enginelt15.0.22
simatic_ipc627e_firmwarelt25.02.10

Name	Operator	Version
converged_security_and_manageability_engine	lt	12.0.81
converged_security_and_manageability_engine	lt	13.0.47
converged_security_and_manageability_engine	lt	13.30.17
converged_security_and_manageability_engine	lt	14.1.53
converged_security_and_manageability_engine	lt	14.5.32
converged_security_and_manageability_engine	lt	11.8.86
converged_security_and_manageability_engine	lt	11.12.86
converged_security_and_manageability_engine	lt	11.22.86
converged_security_and_manageability_engine	lt	15.0.22
simatic_ipc627e_firmware	lt	25.02.10