Intel Manageability Engine Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Intel Manageability Engine Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2017-5705 — CVSS 7.8 (high): Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access…
• CVE-2017-5708 — CVSS 7.8 (high): Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process…
• CVE-2017-5711 — CVSS 7.8 (high): Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.1…
• CVE-2017-5712 — CVSS 7.2 (high): Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20…
• CVE-2018-3657 — CVSS 6.7 (medium): Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially…
• CVE-2018-3616 — CVSS 5.9 (medium): Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an…
• CVE-2018-3658 — CVSS 5.3 (medium): Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT…
• CVE-2017-5698 — CVSS 4.4 (medium): Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology firmware versions 11.0.25.3001 and…