Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Converged_security_management_engine_firmware | Intel | 11.0 (including) | 11.8.77 (excluding) |
| Converged_security_management_engine_firmware | Intel | 11.10 (including) | 11.12.77 (excluding) |
| Converged_security_management_engine_firmware | Intel | 11.20 (including) | 11.22.77 (excluding) |
| Converged_security_management_engine_firmware | Intel | 12.0 (including) | 12.0.64 (excluding) |
| Converged_security_management_engine_firmware | Intel | 13.0 (including) | 13.0.32 (excluding) |
| Converged_security_management_engine_firmware | Intel | 14.0 (including) | 14.0.33 (excluding) |
| Converged_security_management_engine_firmware | Intel | 14.5.11 (including) | 14.5.11 (including) |