5.7
Medium
CVE-2023-40067 Unchecked return value in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable…
Description
Unchecked return value in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Intel(R) CSME | Versions not published | |
| converged_security_management_engine_firmware 16.1 | earliest → < 16.1.32 | 16.1.32 |
| converged_security_management_engine_firmware 15.40 | earliest → < 15.40.34 | 15.40.34 |
| converged_security_management_engine_firmware 15.0 | earliest → < 15.0.49 | 15.0.49 |
References
- www.intel.com www.intel.com
Timeline
- Published
- Last modified
Other CVEs of Intel(R) CSME
The 19 CVEs of Intel(R) CSME →
CVE-2023-34424
Improper input validation in firmware for some Intel(R) CSME may allow a privileged user to potentially enable denial of…
4.4
Medium
CVE-2024-21844
Integer overflow in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable denial of…
4.3
Medium
CVE-2023-48361
Improper initialization in firmware for some Intel(R) CSME may allow a privileged user to potentially enable information…
2.3
Low
CVE-2020-8761
Inadequate encryption strength in subsystem for Intel(R) CSME versions before 13.0.40 and 13.30.10 may allow an…
Not rated