CVE-2020-24506

Published: Jun 9, 2021Modified: Nov 21, 2024

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

Out of bound read in a subsystem in the Intel(R) CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32 may allow a privileged user to potentially enable information disclosure via local access.

Affected (10)

Products: Intel: Converged Security And Manageability Engine · Siemens: Simatic Field Pg M6 Firmware, Simatic Ipc627e Firmware, Simatic Ipc647e Firmware, Simatic Ipc677e Firmware, Simatic Ipc847e Firmware

Intel

1 product

Converged Security And Manageability Engine

Siemens

5 products

Simatic Field Pg M6 Firmware

Simatic Ipc627e Firmware

Simatic Ipc647e Firmware

Simatic Ipc677e Firmware

Simatic Ipc847e Firmware

Configuration A

1 vulnerable · 89 platform

Vulnerable Software	Affected Versions
Intel Converged Security And Manageability Engine	Before 12.0.81

Running on/with	Platform Versions
Intel B360	All versions
Intel B365	All versions
Intel C242	All versions
Intel C246	All versions
Intel Celeron 4205u	All versions
Intel Celeron 4305u	All versions
Intel Celeron 4305ue	All versions
Intel Core I3 8100	All versions
Intel Core I3 8100b	All versions
Intel Core I3 8100h	All versions
Intel Core I3 8100t	All versions
Intel Core I3 8109u	All versions
Intel Core I3 8121u	All versions
Intel Core I3 8130u	All versions
Intel Core I3 8140u	All versions
Intel Core I3 8145u	All versions
Intel Core I3 8145ue	All versions
Intel Core I3 8300	All versions
Intel Core I3 8300t	All versions
Intel Core I3 8350k	All versions
Intel Core I5 8200y	All versions
Intel Core I5 8210y	All versions
Intel Core I5 8250u	All versions
Intel Core I5 8257u	All versions
Intel Core I5 8259u	All versions
Intel Core I5 8260u	All versions
Intel Core I5 8265u	All versions
Intel Core I5 8269u	All versions
Intel Core I5 8279u	All versions
Intel Core I5 8300h	All versions
Intel Core I5 8305g	All versions
Intel Core I5 8310y	All versions
Intel Core I5 8350u	All versions
Intel Core I5 8365u	All versions
Intel Core I5 8365ue	All versions
Intel Core I5 8400	All versions
Intel Core I5 8400b	All versions
Intel Core I5 8400h	All versions
Intel Core I5 8400t	All versions
Intel Core I5 8500	All versions
Intel Core I5 8500b	All versions
Intel Core I5 8500t	All versions
Intel Core I5 8600	All versions
Intel Core I5 8600k	All versions
Intel Core I5 8600t	All versions
Intel Core I7 8086k	All versions
Intel Core I7 8500y	All versions
Intel Core I7 8550u	All versions
Intel Core I7 8557u	All versions
Intel Core I7 8559u	All versions
Intel Core I7 8565u	All versions
Intel Core I7 8569u	All versions
Intel Core I7 8650u	All versions
Intel Core I7 8665u	All versions
Intel Core I7 8665ue	All versions
Intel Core I7 8700	All versions
Intel Core I7 8700b	All versions
Intel Core I7 8700k	All versions
Intel Core I7 8700t	All versions
Intel Core I7 8705g	All versions
Intel Core I7 8706g	All versions
Intel Core I7 8709g	All versions
Intel Core I7 8750h	All versions
Intel Core I7 8809g	All versions
Intel Core I7 8850h	All versions
Intel Core I9 8950hk	All versions
Intel H310	All versions
Intel H370	All versions
Intel Mobile Cm246	All versions
Intel Q370	All versions
Intel Xeon W 10855m	All versions
Intel Xeon W 10885m	All versions
Intel Xeon W 11855m	All versions
Intel Xeon W 11955m	All versions
Intel Xeon W 1250	All versions
Intel Xeon W 1250e	All versions
Intel Xeon W 1250p	All versions
Intel Xeon W 1250te	All versions
Intel Xeon W 1270	All versions
Intel Xeon W 1270e	All versions
Intel Xeon W 1270p	All versions
Intel Xeon W 1270te	All versions
Intel Xeon W 1290	All versions
Intel Xeon W 1290e	All versions
Intel Xeon W 1290p	All versions
Intel Xeon W 1290t	All versions
Intel Xeon W 1290te	All versions
Intel Z370	All versions
Intel Z390	All versions

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Intel Converged Security And Manageability Engine	Before 13.0.47

Configuration C

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Intel Converged Security And Manageability Engine	Before 13.30.17

Running on/with	Platform Versions
Intel Core I3 L13g4	All versions
Intel Core I5 L16g7	All versions

Configuration D

1 vulnerable · 88 platform

Vulnerable Software	Affected Versions
Intel Converged Security And Manageability Engine	Before 14.1.53

Running on/with	Platform Versions
Intel B460	All versions
Intel Core I3 1000g1	All versions
Intel Core I3 1000g4	All versions
Intel Core I3 1000ng4	All versions
Intel Core I3 1005g1	All versions
Intel Core I3 10100	All versions
Intel Core I3 10100e	All versions
Intel Core I3 10100f	All versions
Intel Core I3 10100t	All versions
Intel Core I3 10100te	All versions
Intel Core I3 10100y	All versions
Intel Core I3 10105	All versions
Intel Core I3 10105f	All versions
Intel Core I3 10105t	All versions
Intel Core I3 10110u	All versions
Intel Core I3 10110y	All versions
Intel Core I3 10300	All versions
Intel Core I3 10300t	All versions
Intel Core I3 10305	All versions
Intel Core I3 10305t	All versions
Intel Core I3 10320	All versions
Intel Core I3 10325	All versions
Intel Core I5 10200h	All versions
Intel Core I5 10210u	All versions
Intel Core I5 10210y	All versions
Intel Core I5 10300h	All versions
Intel Core I5 1030g4	All versions
Intel Core I5 1030g7	All versions
Intel Core I5 1030ng7	All versions
Intel Core I5 10310u	All versions
Intel Core I5 10310y	All versions
Intel Core I5 1035g1	All versions
Intel Core I5 1035g4	All versions
Intel Core I5 1035g7	All versions
Intel Core I5 1038ng7	All versions
Intel Core I5 10400	All versions
Intel Core I5 10400f	All versions
Intel Core I5 10400h	All versions
Intel Core I5 10400t	All versions
Intel Core I5 10500	All versions
Intel Core I5 10500e	All versions
Intel Core I5 10500h	All versions
Intel Core I5 10500t	All versions
Intel Core I5 10500te	All versions
Intel Core I5 10505	All versions
Intel Core I5 10600	All versions
Intel Core I5 10600k	All versions
Intel Core I5 10600kf	All versions
Intel Core I5 10600t	All versions
Intel Core I7 10510u	All versions
Intel Core I7 10510y	All versions
Intel Core I7 1060g7	All versions
Intel Core I7 1060ng7	All versions
Intel Core I7 10610u	All versions
Intel Core I7 1065g7	All versions
Intel Core I7 1068ng7	All versions
Intel Core I7 10700	All versions
Intel Core I7 10700e	All versions
Intel Core I7 10700f	All versions
Intel Core I7 10700k	All versions
Intel Core I7 10700kf	All versions
Intel Core I7 10700t	All versions
Intel Core I7 10700te	All versions
Intel Core I7 10710u	All versions
Intel Core I7 10750h	All versions
Intel Core I7 10810u	All versions
Intel Core I7 10850h	All versions
Intel Core I7 10870h	All versions
Intel Core I7 10875h	All versions
Intel Core I9 10850k	All versions
Intel Core I9 10885h	All versions
Intel Core I9 10900	All versions
Intel Core I9 10900e	All versions
Intel Core I9 10900f	All versions
Intel Core I9 10900k	All versions
Intel Core I9 10900kf	All versions
Intel Core I9 10900t	All versions
Intel Core I9 10900te	All versions
Intel Core I9 10910	All versions
Intel Core I9 10980hk	All versions
Intel H410	All versions
Intel H420e	All versions
Intel H470	All versions
Intel Q470	All versions
Intel Q470e	All versions
Intel W480	All versions
Intel W480e	All versions
Intel Z490	All versions

Configuration E

1 vulnerable · 30 platform

Vulnerable Software	Affected Versions
Intel Converged Security And Manageability Engine	Before 14.5.32

Running on/with	Platform Versions
Intel Pentium Gold 4410y	All versions
Intel Pentium Gold 4415u	All versions
Intel Pentium Gold 4415y	All versions
Intel Pentium Gold 4417u	All versions
Intel Pentium Gold 4425y	All versions
Intel Pentium Gold 5405u	All versions
Intel Pentium Gold 6405u	All versions
Intel Pentium Gold 6500y	All versions
Intel Pentium Gold 7505	All versions
Intel Pentium Gold G5400	All versions
Intel Pentium Gold G5400t	All versions
Intel Pentium Gold G5420	All versions
Intel Pentium Gold G5420t	All versions
Intel Pentium Gold G5500	All versions
Intel Pentium Gold G5500t	All versions
Intel Pentium Gold G5600	All versions
Intel Pentium Gold G5600t	All versions
Intel Pentium Gold G5620	All versions
Intel Pentium Gold G6400	All versions
Intel Pentium Gold G6400e	All versions
Intel Pentium Gold G6400t	All versions
Intel Pentium Gold G6400te	All versions
Intel Pentium Gold G6405	All versions
Intel Pentium Gold G6405t	All versions
Intel Pentium Gold G6500	All versions
Intel Pentium Gold G6500t	All versions
Intel Pentium Gold G6505	All versions
Intel Pentium Gold G6505t	All versions
Intel Pentium Gold G6600	All versions
Intel Pentium Gold G6605	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Field Pg M6 Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Field Pg M6	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc627e Firmware	Before 25.02.10

Running on/with	Platform Versions
Siemens Simatic Ipc627e	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc647e Firmware	Before 25.02.10

Running on/with	Platform Versions
Siemens Simatic Ipc647e	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc677e Firmware	Before 25.02.10

Running on/with	Platform Versions
Siemens Simatic Ipc677e	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc847e Firmware	Before 25.02.10

Running on/with	Platform Versions
Siemens Simatic Ipc847e	All versions

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (6)

https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf

Source: secure@intel.com

Third Party Advisory

https://security.netapp.com/advisory/ntap-20210611-0004/

Source: secure@intel.com

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00459.html

Source: secure@intel.com

Vendor Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.netapp.com/advisory/ntap-20210611-0004/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00459.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.