CVE-2020-0542

Published: Jun 15, 2020Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access.

Affected (7)

Products: Intel: Converged Security Management Engine Firmware

Intel

1 product

Converged Security Management Engine Firmware

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Intel Converged Security Management Engine Firmware	From 11.0 to 11.8.77
Intel Converged Security Management Engine Firmware	From 11.10 to 11.12.77
Intel Converged Security Management Engine Firmware	From 11.20 to 11.22.77
Intel Converged Security Management Engine Firmware	From 13.0 to 13.0.32
Intel Converged Security Management Engine Firmware	From 14.0 to 14.0.33
Intel Converged Security Management Engine Firmware	From 12.0 to 12.0.64
Intel Converged Security Management Engine Firmware	Version 14.5.11