PT-2026-7295 · Intel · Intel Converged Security/Management Engine (Csme) Firmware

Published 2026-02-10 · Updated 2026-05-22 · CVE-2025-27708

Positive Technologies (AI Summary)

CVSS v3.1

4.1

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) Converged Security and Management Engine (CSME) Firmware (FW) (affected versions not specified)

Description An out-of-bounds read issue exists in the firmware within Ring 0: Kernel, potentially allowing information disclosure. A system software adversary with privileged user access and a low complexity attack may enable data exposure. This may occur via local access without requiring special internal knowledge or user interaction. The issue may impact the confidentiality of the vulnerable system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-01833

CVE-2025-27708

Affected Products

Intel Converged Security/Management Engine (Csme) Firmware

References · 6

• https://bdu.fstec.ru/vul/2026-01833 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-27708 · Security Note
• https://reddit.com/r/Fedora/comments/1ru9sx6/anyone_else_seeing_fwupdmgr_reporting_a_failed · Reddit Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01315.html · Note
• https://twitter.com/p71sm/status/2057918711944601679 · Twitter Post
• https://twitter.com/CVEnew/status/2021279082256699486 · Twitter Post