Mark Ermolov

The issue is related to insufficient access control in the Intel(R) Trace Hub driver, which may allow an attacker to escalate privileges. For some Intel(R) Trace Hub instances, it is possible to activate test or debug logic at runtime, potentially enabling an unauthenticated user with physical access to escalate privileges.

The issue is related to the activation of test or debug logic at runtime for some Intel(R) processors, which may allow an unauthenticated user to potentially enable escalation of privilege via physical access. This is due to insufficient protection of service data in the BIOS/UEFI firmware. Exploitation of the issue may allow an attacker to gain elevated privileges and access sensitive information. The problem is also associated with a debugging functionality that has excessive privileges, potentially allowing attackers to read encrypted files.

The issue allows a remote authenticated malicious user with low privileges to potentially gain unauthorized read access to arbitrary files by manipulating input parameters.

Name of the Vulnerable Software and Affected Versions: Intel(R) TXE versions before 3.175 Intel(R) TXE versions before 4.0.25 Description: The issue is related to improper access control in the Intel(R) TXE subsystem, which may allow an unauthenticated user to potentially enable escalation of privilege via physical access. This is due to insecure privilege management. Recommendations: For Intel(R) TXE versions before 3.175, update to version 3.175 or later. For Intel(R) TXE versions before 4.0.25, update to version 4.0.25 or later.

Name of the Vulnerable Software and Affected Versions: Intel(R) Innovation Engine versions prior to 1.0.859 Description: The issue is related to insufficient control flow management in the firmware build and signing tool, which may allow an unauthenticated user to potentially enable escalation of privilege via physical access. This is also associated with insecure privilege management, allowing an attacker to potentially elevate their privileges. Recommendations: For versions prior to 1.0.859, update to version 1.0.859 or later to resolve the issue.

The issue is related to insufficient access control in the Intel Converged Security and Management Engine, Intel Server Platform Services, and Intel Trusted Execution Engine. This could allow an unauthenticated user with physical access to potentially enable escalation of privilege. The vulnerability may also allow an attacker to extract the platform's root key, which is used as a root of trust for authenticating various platform components, including TPM and UEFI firmware. This could compromise cryptographic operations for hardware-enabled security technologies.

A vulnerability in Intel CSME, Intel Server Platform Services, and Intel Trusted Execution Engine Firmware may allow an unauthenticated user to potentially modify or disclose information via physical access. The issue is caused by privilege management errors.

The issue involves the `Firmware` component and is related to insufficient access control. It allows attackers to modify the EFI flash-memory region using a crafted app that has root access.

The issue is caused by multiple buffer overflows in the Intel Management Engine (ME) firmware, which can allow an attacker to execute arbitrary code. This can be exploited by an attacker with local access to the system.

The issue allows an attacker with physical access to the system to gain access to personal information.

The issue may allow an attacker with physical access to the system to gain access to personal information.