CSME installer software

CVEs (3)

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2023-32633	Intel CSME	Med	0.44	6.7	Mar 14, 2024	Improper input validation in the Intel(R) CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-28389	Intel CSME	Med	0.44	6.7	Mar 14, 2024	Incorrect default permissions in some Intel(R) CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-29871	Intel Converged Security Management Engine Firmware	Med	0.44	6.7	Aug 11, 2023	Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE-2023-32633MedMar 14, 2024
Intel
CSME
risk 0.44cvss 6.7epss 0.00
Improper input validation in the Intel(R) CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-28389MedMar 14, 2024
Intel
CSME
risk 0.44cvss 6.7epss 0.00
Incorrect default permissions in some Intel(R) CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-29871MedAug 11, 2023
Intel
Converged Security Management Engine Firmware
risk 0.44cvss 6.7epss 0.00
Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access.