Intel Converged Security And Management Engine vulnerabilities

5 CVEs affecting Intel Converged Security And Management Engine, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-8755, published 2020-11-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-0091, published 2019-05-17. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Code injection vulnerability in installer for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable…
CVE-2019-0093, published 2019-05-17. Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient data sanitization vulnerability in HECI subsystem for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow a…
CVE-2020-8744, published 2020-11-12. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions before E3_05.01.04.200…
CVE-2019-0090, published 2019-05-17. High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient access control vulnerability in subsystem for Intel(R) CSME before versions 11.x, 12.0.35 Intel(R) TXE 3.x, 4.x, Intel(R) Server Platform Services 3.x, 4.x, Intel(R) SPS before version…
CVE-2020-8755, published 2020-11-12. Medium severity, CVSS 6.4. EPSS: 0.3% chance of exploitation in the next 30 days. Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and E3_05.01.04.200 may allow an unauthenticated user to potentially…