Intel is warning of a high-severity flaw in the firmware of its converged security and management engine (CSME) CSME powers Intel s Active Management System hardware and firmware technology. CSME is used for remote out-of-band management in consumer or corporate PCs, Internet of Things devices, and workstations. A privileged user, with local access, could exploit the flaw to launch an array of attacks, according to Intel. Overall, Intel patched six flaws on Tuesday, including the high severity flaw in CSME.
Source: https://threatpost.com/intel-patches-high-severity-flaw-in-security-engine/152794/