CVE-2020-0536

Published: Jun 15, 2020Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Improper input validation in the DAL subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and Intel(R) TXE versions before 3.1.75 and 4.0.25 may allow an unauthenticated user to potentially enable information disclosure via network access.

Affected (8)

Products: Intel: Converged Security Management Engine Firmware, Trusted Execution Engine Firmware

Intel

2 products

Converged Security Management Engine Firmware

Trusted Execution Engine Firmware

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Intel Converged Security Management Engine Firmware	From 11.0 to 11.8.77
Intel Converged Security Management Engine Firmware	From 11.10 to 11.12.77
Intel Converged Security Management Engine Firmware	From 11.20 to 11.22.77
Intel Converged Security Management Engine Firmware	From 13.0 to 13.0.32
Intel Converged Security Management Engine Firmware	From 14.0 to 14.0.33
Intel Converged Security Management Engine Firmware	From 12.0 to 12.0.64