Intel(R) Converged Security and Management Engine

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2025-20037See referencesTime-of-check time-of-use race condition in firmware for some Intel(R) Converged Security and Management Engine may allow a privileged user MEDIUM 6.80.1 %
CVE-2022-38102before versions 15.0.45, and 16.1.27Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may alHIGH 7.20.2 %