Description
Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Intel Corporation Intel(R) Active Management Technology
Versions before version 12.0.5.affected
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf ↗
- https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05 ↗
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html ↗
- http://www.securityfocus.com/bid/106996 ↗
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_us ↗
- https://security.netapp.com/advisory/ntap-20180924-0003/ ↗