cnvd-2020-18610
Vulnerability from cnvd
Title
Intel TXE和Intel Converged Security and Management Engine授权问题漏洞
Description
Intel Converged Security and Management Engine（CSME）和Intel TXE都是美国英特尔（Intel）公司的产品。Intel Converged Security and Management Engine是一款安全管理引擎。Intel TXE是一款使用在CPU（中央处理器）中具有硬件验证功能的信任执行引擎。 Intel TXE和Intel Converged Security and Management Engine存在授权问题漏洞。攻击者可利用该漏洞绕过身份验证，提升权限。
Severity
中
Patch Name
Intel TXE和Intel Converged Security and Management Engine授权问题漏洞的补丁
Patch Description
Intel Converged Security and Management Engine（CSME）和Intel TXE都是美国英特尔（Intel）公司的产品。Intel Converged Security and Management Engine是一款安全管理引擎。Intel TXE是一款使用在CPU（中央处理器）中具有硬件验证功能的信任执行引擎。 Intel TXE和Intel Converged Security and Management Engine存在授权问题漏洞。攻击者可利用该漏洞绕过身份验证，提升权限。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html

Reference
https://nvd.nist.gov/vuln/detail/CVE-2019-11110
Impacted products
Name
['Intel Intel TXE <3.1.70', 'Intel Intel TXE <4.0.20', 'Intel Intel Converged Security and Management Engine（CSME） <11.8.70', 'Intel Intel Converged Security and Management Engine（CSME） <12.0.45', 'Intel Intel Converged Security and Management Engine（CSME） <13.0.10', 'Intel Intel Converged Security and Management Engine（CSME） <14.0.10', 'Intel Intel Converged Security and Management Engine（CSME） <11.11.70', 'Intel Intel Converged Security and Management Engine（CSME） <11.22.70']
Show details on source website

To clipboard 

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-11110",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2019-11110"
    }
  },
  "description": "Intel Converged Security and Management Engine\uff08CSME\uff09\u548cIntel TXE\u90fd\u662f\u7f8e\u56fd\u82f1\u7279\u5c14\uff08Intel\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Intel Converged Security and Management Engine\u662f\u4e00\u6b3e\u5b89\u5168\u7ba1\u7406\u5f15\u64ce\u3002Intel TXE\u662f\u4e00\u6b3e\u4f7f\u7528\u5728CPU\uff08\u4e2d\u592e\u5904\u7406\u5668\uff09\u4e2d\u5177\u6709\u786c\u4ef6\u9a8c\u8bc1\u529f\u80fd\u7684\u4fe1\u4efb\u6267\u884c\u5f15\u64ce\u3002\n\nIntel TXE\u548cIntel Converged Security and Management Engine\u5b58\u5728\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7\u8eab\u4efd\u9a8c\u8bc1\uff0c\u63d0\u5347\u6743\u9650\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-18610",
  "openTime": "2020-03-22",
  "patchDescription": "Intel Converged Security and Management Engine\uff08CSME\uff09\u548cIntel TXE\u90fd\u662f\u7f8e\u56fd\u82f1\u7279\u5c14\uff08Intel\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Intel Converged Security and Management Engine\u662f\u4e00\u6b3e\u5b89\u5168\u7ba1\u7406\u5f15\u64ce\u3002Intel TXE\u662f\u4e00\u6b3e\u4f7f\u7528\u5728CPU\uff08\u4e2d\u592e\u5904\u7406\u5668\uff09\u4e2d\u5177\u6709\u786c\u4ef6\u9a8c\u8bc1\u529f\u80fd\u7684\u4fe1\u4efb\u6267\u884c\u5f15\u64ce\u3002\r\n\r\nIntel TXE\u548cIntel Converged Security and Management Engine\u5b58\u5728\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7\u8eab\u4efd\u9a8c\u8bc1\uff0c\u63d0\u5347\u6743\u9650\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Intel TXE\u548cIntel Converged Security and Management Engine\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Intel Intel TXE \u003c3.1.70",
      "Intel Intel TXE \u003c4.0.20",
      "Intel Intel Converged Security and Management Engine\uff08CSME\uff09 \u003c11.8.70",
      "Intel Intel Converged Security and Management Engine\uff08CSME\uff09 \u003c12.0.45",
      "Intel Intel Converged Security and Management Engine\uff08CSME\uff09 \u003c13.0.10",
      "Intel Intel Converged Security and Management Engine\uff08CSME\uff09 \u003c14.0.10",
      "Intel Intel Converged Security and Management Engine\uff08CSME\uff09 \u003c11.11.70",
      "Intel Intel Converged Security and Management Engine\uff08CSME\uff09 \u003c11.22.70"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2019-11110",
  "serverity": "\u4e2d",
  "submitTime": "2019-12-06",
  "title": "Intel TXE\u548cIntel Converged Security and Management Engine\u6388\u6743\u95ee\u9898\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.