Input validation

2020-11-1218:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

Improper initialization in subsystem for Intel® CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel® TXE versions before 4.0.30 Intel® SPS versions before E3_05.01.04.200 may allow a privileged user to potentially enable escalation of privilege via local access.

CPENameOperatorVersion
converged_security_and_management_enginege14.5.0
converged_security_and_management_enginelt14.5.25
converged_security_and_management_enginege14.0.0
converged_security_and_management_enginelt14.0.45
converged_security_and_management_enginege13.30.0
converged_security_and_management_enginelt13.30.10
converged_security_and_management_enginege13.0.0
converged_security_and_management_enginelt13.0.40
converged_security_and_management_enginelt12.0.70
server_platform_serviceseq< e3-5.1.4.200

Name	Operator	Version
converged_security_and_management_engine	ge	14.5.0
converged_security_and_management_engine	lt	14.5.25
converged_security_and_management_engine	ge	14.0.0
converged_security_and_management_engine	lt	14.0.45
converged_security_and_management_engine	ge	13.30.0
converged_security_and_management_engine	lt	13.30.10
converged_security_and_management_engine	ge	13.0.0
converged_security_and_management_engine	lt	13.0.40
converged_security_and_management_engine	lt	12.0.70
server_platform_services	eq	< e3-5.1.4.200