Converged Security And Management Engine vulnerabilities

Product

Converged Security And Management Engine

by Intel · last CVE Nov 12, 2020

CVEs

On KEV

7.8

Max CVSS

New 30D

Severity mix

Critical 0High 3Medium 2Low 0

Severity

Exploitation

Watch

Add Converged Security And Management Engine to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-8755	6.4	0%	Nov 12	Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and E3_05.01.04.200 may allow an unauthenticated… Affected: before 12.0.70; 14.0.0 before 14.0.45
CVE-2019-0093	4.4	0%	May 17	Insufficient data sanitization vulnerability in HECI subsystem for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) SPS before version… Affected: 11.8.0 before 11.8.65; 11.11.0 before 11.11.65; 11.22.0 before 11.22.65; 12.0 before 12.0.35