Intel Converged Security And Management Engine — known CVE vulnerabilities

Every CVE whose affected-product data names Intel Converged Security And Management Engine, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2019-0091 — CVSS 7.8 (high): Code injection vulnerability in installer for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65…
• CVE-2020-8744 — CVSS 7.8 (high): Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE…
• CVE-2019-0090 — CVSS 7.1 (high): Insufficient access control vulnerability in subsystem for Intel(R) CSME before versions 11.x, 12.0.35 Intel(R) TXE 3.x, 4.x, Intel(R)…
• CVE-2020-8755 — CVSS 6.4 (medium): Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and…
• CVE-2019-0093 — CVSS 4.4 (medium): Insufficient data sanitization vulnerability in HECI subsystem for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and…