CVE-2020-24507

Published: Jun 9, 2021Modified: Nov 21, 2024

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may allow a privileged user to potentially enable information disclosure via local access.

Affected (22)

Products: Intel: Converged Security And Manageability Engine · Siemens: Simatic Field Pg M6 Firmware, Simatic Ipc427e Firmware, Simatic Ipc477e Firmware, Simatic Ipc477e Pro Firmware, Simatic Ipc527g Firmware, Simatic Ipc547g Firmware, Simatic Ipc627e Firmware, Simatic Ipc647e Firmware, Simatic Ipc677e Firmware, Simatic Ipc847e Firmware, Simatic Itp1000 Firmware, Simatic Field Pg M5 Firmware

Intel

1 product

Converged Security And Manageability Engine

Siemens

12 products

Simatic Field Pg M6 Firmware

Simatic Ipc427e Firmware

Simatic Ipc477e Firmware

Simatic Ipc477e Pro Firmware

Simatic Ipc527g Firmware

Simatic Ipc547g Firmware

Simatic Ipc627e Firmware

Simatic Ipc647e Firmware

Simatic Ipc677e Firmware

Simatic Ipc847e Firmware

Simatic Itp1000 Firmware

Simatic Field Pg M5 Firmware

Configuration A

1 vulnerable · 30 platform

Vulnerable Software	Affected Versions
Intel Converged Security And Manageability Engine	Before 12.0.81

Running on/with	Platform Versions
Intel B360	All versions
Intel B365	All versions
Intel C242	All versions
Intel C246	All versions
Intel Celeron 4205u	All versions
Intel Celeron 4305u	All versions
Intel Celeron 4305ue	All versions
Intel H310	All versions
Intel H370	All versions
Intel Mobile Cm246	All versions
Intel Q370	All versions
Intel Xeon W 10855m	All versions
Intel Xeon W 10885m	All versions
Intel Xeon W 11855m	All versions
Intel Xeon W 11955m	All versions
Intel Xeon W 1250	All versions
Intel Xeon W 1250e	All versions
Intel Xeon W 1250p	All versions
Intel Xeon W 1250te	All versions
Intel Xeon W 1270	All versions
Intel Xeon W 1270e	All versions
Intel Xeon W 1270p	All versions
Intel Xeon W 1270te	All versions
Intel Xeon W 1290	All versions
Intel Xeon W 1290e	All versions
Intel Xeon W 1290p	All versions
Intel Xeon W 1290t	All versions
Intel Xeon W 1290te	All versions
Intel Z370	All versions
Intel Z390	All versions

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Intel Converged Security And Manageability Engine	Before 13.0.47

Configuration C

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Intel Converged Security And Manageability Engine	Before 13.30.17

Running on/with	Platform Versions
Intel Core I3 L13g4	All versions
Intel Core I5 L16g7	All versions

Configuration D

1 vulnerable · 88 platform

Vulnerable Software	Affected Versions
Intel Converged Security And Manageability Engine	Before 14.1.53

Running on/with	Platform Versions
Intel B460	All versions
Intel Core I3 1000g1	All versions
Intel Core I3 1000g4	All versions
Intel Core I3 1000ng4	All versions
Intel Core I3 1005g1	All versions
Intel Core I3 10100	All versions
Intel Core I3 10100e	All versions
Intel Core I3 10100f	All versions
Intel Core I3 10100t	All versions
Intel Core I3 10100te	All versions
Intel Core I3 10100y	All versions
Intel Core I3 10105	All versions
Intel Core I3 10105f	All versions
Intel Core I3 10105t	All versions
Intel Core I3 10110u	All versions
Intel Core I3 10110y	All versions
Intel Core I3 10300	All versions
Intel Core I3 10300t	All versions
Intel Core I3 10305	All versions
Intel Core I3 10305t	All versions
Intel Core I3 10320	All versions
Intel Core I3 10325	All versions
Intel Core I5 10200h	All versions
Intel Core I5 10210u	All versions
Intel Core I5 10210y	All versions
Intel Core I5 10300h	All versions
Intel Core I5 1030g4	All versions
Intel Core I5 1030g7	All versions
Intel Core I5 1030ng7	All versions
Intel Core I5 10310u	All versions
Intel Core I5 10310y	All versions
Intel Core I5 1035g1	All versions
Intel Core I5 1035g4	All versions
Intel Core I5 1035g7	All versions
Intel Core I5 1038ng7	All versions
Intel Core I5 10400	All versions
Intel Core I5 10400f	All versions
Intel Core I5 10400h	All versions
Intel Core I5 10400t	All versions
Intel Core I5 10500	All versions
Intel Core I5 10500e	All versions
Intel Core I5 10500h	All versions
Intel Core I5 10500t	All versions
Intel Core I5 10500te	All versions
Intel Core I5 10505	All versions
Intel Core I5 10600	All versions
Intel Core I5 10600k	All versions
Intel Core I5 10600kf	All versions
Intel Core I5 10600t	All versions
Intel Core I7 10510u	All versions
Intel Core I7 10510y	All versions
Intel Core I7 1060g7	All versions
Intel Core I7 1060ng7	All versions
Intel Core I7 10610u	All versions
Intel Core I7 1065g7	All versions
Intel Core I7 1068ng7	All versions
Intel Core I7 10700	All versions
Intel Core I7 10700e	All versions
Intel Core I7 10700f	All versions
Intel Core I7 10700k	All versions
Intel Core I7 10700kf	All versions
Intel Core I7 10700t	All versions
Intel Core I7 10700te	All versions
Intel Core I7 10710u	All versions
Intel Core I7 10750h	All versions
Intel Core I7 10810u	All versions
Intel Core I7 10850h	All versions
Intel Core I7 10870h	All versions
Intel Core I7 10875h	All versions
Intel Core I9 10850k	All versions
Intel Core I9 10885h	All versions
Intel Core I9 10900	All versions
Intel Core I9 10900e	All versions
Intel Core I9 10900f	All versions
Intel Core I9 10900k	All versions
Intel Core I9 10900kf	All versions
Intel Core I9 10900t	All versions
Intel Core I9 10900te	All versions
Intel Core I9 10910	All versions
Intel Core I9 10980hk	All versions
Intel H410	All versions
Intel H420e	All versions
Intel H470	All versions
Intel Q470	All versions
Intel Q470e	All versions
Intel W480	All versions
Intel W480e	All versions
Intel Z490	All versions

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Intel Converged Security And Manageability Engine	Before 14.5.32

Configuration F

1 vulnerable · 120 platform

Vulnerable Software	Affected Versions
Intel Converged Security And Manageability Engine	Before 11.8.86

Running on/with	Platform Versions
Intel B150	All versions
Intel B250	All versions
Intel Core I3 7020u	All versions
Intel Core I3 7100	All versions
Intel Core I3 7100e	All versions
Intel Core I3 7100h	All versions
Intel Core I3 7100t	All versions
Intel Core I3 7100u	All versions
Intel Core I3 7101e	All versions
Intel Core I3 7101te	All versions
Intel Core I3 7102e	All versions
Intel Core I3 7130u	All versions
Intel Core I3 7167u	All versions
Intel Core I3 7300	All versions
Intel Core I3 7300t	All versions
Intel Core I3 7320	All versions
Intel Core I3 7350k	All versions
Intel Core I3 8100	All versions
Intel Core I3 8100b	All versions
Intel Core I3 8100h	All versions
Intel Core I3 8100t	All versions
Intel Core I3 8109u	All versions
Intel Core I3 8121u	All versions
Intel Core I3 8130u	All versions
Intel Core I3 8140u	All versions
Intel Core I3 8145u	All versions
Intel Core I3 8145ue	All versions
Intel Core I3 8300	All versions
Intel Core I3 8300t	All versions
Intel Core I3 8350k	All versions
Intel Core I5 7200u	All versions
Intel Core I5 7260u	All versions
Intel Core I5 7267u	All versions
Intel Core I5 7287u	All versions
Intel Core I5 7300hq	All versions
Intel Core I5 7300u	All versions
Intel Core I5 7360u	All versions
Intel Core I5 7400	All versions
Intel Core I5 7400t	All versions
Intel Core I5 7440eq	All versions
Intel Core I5 7440hq	All versions
Intel Core I5 7442eq	All versions
Intel Core I5 7500	All versions
Intel Core I5 7500t	All versions
Intel Core I5 7600	All versions
Intel Core I5 7600k	All versions
Intel Core I5 7600t	All versions
Intel Core I5 7y54	All versions
Intel Core I5 7y57	All versions
Intel Core I5 8200y	All versions
Intel Core I5 8210y	All versions
Intel Core I5 8250u	All versions
Intel Core I5 8257u	All versions
Intel Core I5 8259u	All versions
Intel Core I5 8260u	All versions
Intel Core I5 8265u	All versions
Intel Core I5 8269u	All versions
Intel Core I5 8279u	All versions
Intel Core I5 8300h	All versions
Intel Core I5 8305g	All versions
Intel Core I5 8310y	All versions
Intel Core I5 8350u	All versions
Intel Core I5 8365u	All versions
Intel Core I5 8365ue	All versions
Intel Core I5 8400	All versions
Intel Core I5 8400b	All versions
Intel Core I5 8400h	All versions
Intel Core I5 8400t	All versions
Intel Core I5 8500	All versions
Intel Core I5 8500b	All versions
Intel Core I5 8500t	All versions
Intel Core I5 8600	All versions
Intel Core I5 8600k	All versions
Intel Core I5 8600t	All versions
Intel Core I7 7500u	All versions
Intel Core I7 7560u	All versions
Intel Core I7 7567u	All versions
Intel Core I7 7600u	All versions
Intel Core I7 7660u	All versions
Intel Core I7 7700	All versions
Intel Core I7 7700hq	All versions
Intel Core I7 7700k	All versions
Intel Core I7 7700t	All versions
Intel Core I7 7820eq	All versions
Intel Core I7 7820hk	All versions
Intel Core I7 7820hq	All versions
Intel Core I7 7920hq	All versions
Intel Core I7 7y75	All versions
Intel Core I7 8086k	All versions
Intel Core I7 8500y	All versions
Intel Core I7 8550u	All versions
Intel Core I7 8557u	All versions
Intel Core I7 8559u	All versions
Intel Core I7 8565u	All versions
Intel Core I7 8569u	All versions
Intel Core I7 8650u	All versions
Intel Core I7 8665u	All versions
Intel Core I7 8665ue	All versions
Intel Core I7 8700	All versions
Intel Core I7 8700b	All versions
Intel Core I7 8700k	All versions
Intel Core I7 8700t	All versions
Intel Core I7 8705g	All versions
Intel Core I7 8706g	All versions
Intel Core I7 8709g	All versions
Intel Core I7 8750h	All versions
Intel Core I7 8809g	All versions
Intel Core I7 8850h	All versions
Intel Core I9 8950hk	All versions
Intel Core M3 7y30	All versions
Intel Core M3 7y32	All versions
Intel Core M3 8100y	All versions
Intel H110	All versions
Intel H170	All versions
Intel H270	All versions
Intel Q150	All versions
Intel Q170	All versions
Intel Q250	All versions
Intel Q270	All versions
Intel Z170	All versions

Configuration G

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Intel Converged Security And Manageability Engine	Before 11.12.86

Running on/with	Platform Versions
Intel C420	All versions
Intel X299	All versions

Configuration H

1 vulnerable · 12 platform

Vulnerable Software	Affected Versions
Intel Converged Security And Manageability Engine	Before 11.22.86

Running on/with	Platform Versions
Intel C621	All versions
Intel C621a	All versions
Intel C622	All versions
Intel C624	All versions
Intel C625	All versions
Intel C626	All versions
Intel C627	All versions
Intel C627a	All versions
Intel C628	All versions
Intel C629	All versions
Intel C629a	All versions
Intel Z270	All versions

Configuration I

1 vulnerable · 42 platform

Vulnerable Software	Affected Versions
Intel Converged Security And Manageability Engine	Before 13.50.11

Running on/with	Platform Versions
Intel Celeron N2805	All versions
Intel Celeron N2806	All versions
Intel Celeron N2807	All versions
Intel Celeron N2808	All versions
Intel Celeron N2810	All versions
Intel Celeron N2815	All versions
Intel Celeron N2820	All versions
Intel Celeron N2830	All versions
Intel Celeron N2840	All versions
Intel Celeron N2910	All versions
Intel Celeron N2920	All versions
Intel Celeron N2930	All versions
Intel Celeron N2940	All versions
Intel Celeron N3000	All versions
Intel Celeron N3010	All versions
Intel Celeron N3050	All versions
Intel Celeron N3060	All versions
Intel Celeron N3150	All versions
Intel Celeron N3160	All versions
Intel Celeron N3350	All versions
Intel Celeron N3350e	All versions
Intel Celeron N3450	All versions
Intel Celeron N4000	All versions
Intel Celeron N4000c	All versions
Intel Celeron N4020	All versions
Intel Celeron N4020c	All versions
Intel Celeron N4100	All versions
Intel Celeron N4120	All versions
Intel Celeron N4500	All versions
Intel Celeron N4505	All versions
Intel Celeron N5095	All versions
Intel Celeron N5100	All versions
Intel Celeron N5105	All versions
Intel Celeron N6210	All versions
Intel Celeron N6211	All versions
Intel Pentium Silver A1030	All versions
Intel Pentium Silver J5005	All versions
Intel Pentium Silver J5040	All versions
Intel Pentium Silver N5000	All versions
Intel Pentium Silver N5030	All versions
Intel Pentium Silver N6000	All versions
Intel Pentium Silver N6005	All versions

Configuration J

1 vulnerable · 88 platform

Vulnerable Software	Affected Versions
Intel Converged Security And Manageability Engine	Before 15.0.22

Running on/with	Platform Versions
Intel Celeron 6305	All versions
Intel Celeron 6305e	All versions
Intel Core I3 11100b	All versions
Intel Core I3 1110g4	All versions
Intel Core I3 1115g4	All versions
Intel Core I3 1115g4e	All versions
Intel Core I3 1115gre	All versions
Intel Core I3 1120g4	All versions
Intel Core I3 1125g4	All versions
Intel Core I5 11260h	All versions
Intel Core I5 11300h	All versions
Intel Core I5 1130g7	All versions
Intel Core I5 11320h	All versions
Intel Core I5 1135g7	All versions
Intel Core I5 11400	All versions
Intel Core I5 11400f	All versions
Intel Core I5 11400h	All versions
Intel Core I5 11400t	All versions
Intel Core I5 1140g7	All versions
Intel Core I5 1145g7	All versions
Intel Core I5 1145g7e	All versions
Intel Core I5 1145gre	All versions
Intel Core I5 11500	All versions
Intel Core I5 11500b	All versions
Intel Core I5 11500h	All versions
Intel Core I5 11500t	All versions
Intel Core I5 1155g7	All versions
Intel Core I5 11600	All versions
Intel Core I5 11600k	All versions
Intel Core I5 11600kf	All versions
Intel Core I5 11600t	All versions
Intel Core I7 11370h	All versions
Intel Core I7 11375h	All versions
Intel Core I7 11390h	All versions
Intel Core I7 1160g7	All versions
Intel Core I7 1165g7	All versions
Intel Core I7 11700	All versions
Intel Core I7 11700b	All versions
Intel Core I7 11700f	All versions
Intel Core I7 11700k	All versions
Intel Core I7 11700kf	All versions
Intel Core I7 11700t	All versions
Intel Core I7 11800h	All versions
Intel Core I7 1180g7	All versions
Intel Core I7 11850h	All versions
Intel Core I7 1185g7	All versions
Intel Core I7 1185g7e	All versions
Intel Core I7 1185gre	All versions
Intel Core I7 1195g7	All versions
Intel Core I9 11900	All versions
Intel Core I9 11900f	All versions
Intel Core I9 11900h	All versions
Intel Core I9 11900k	All versions
Intel Core I9 11900kb	All versions
Intel Core I9 11900kf	All versions
Intel Core I9 11900t	All versions
Intel Core I9 11950h	All versions
Intel Core I9 11980hk	All versions
Intel Pentium Gold 4410y	All versions
Intel Pentium Gold 4415u	All versions
Intel Pentium Gold 4415y	All versions
Intel Pentium Gold 4417u	All versions
Intel Pentium Gold 4425y	All versions
Intel Pentium Gold 5405u	All versions
Intel Pentium Gold 6405u	All versions
Intel Pentium Gold 6500y	All versions
Intel Pentium Gold 7505	All versions
Intel Pentium Gold G5400	All versions
Intel Pentium Gold G5400t	All versions
Intel Pentium Gold G5420	All versions
Intel Pentium Gold G5420t	All versions
Intel Pentium Gold G5500	All versions
Intel Pentium Gold G5500t	All versions
Intel Pentium Gold G5600	All versions
Intel Pentium Gold G5600t	All versions
Intel Pentium Gold G5620	All versions
Intel Pentium Gold G6400	All versions
Intel Pentium Gold G6400e	All versions
Intel Pentium Gold G6400t	All versions
Intel Pentium Gold G6400te	All versions
Intel Pentium Gold G6405	All versions
Intel Pentium Gold G6405t	All versions
Intel Pentium Gold G6500	All versions
Intel Pentium Gold G6500t	All versions
Intel Pentium Gold G6505	All versions
Intel Pentium Gold G6505t	All versions
Intel Pentium Gold G6600	All versions
Intel Pentium Gold G6605	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Field Pg M6 Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Field Pg M6	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc427e Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc427e	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc477e Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc477e	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc477e Pro Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc477e Pro	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc527g Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc527g	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc547g Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc547g	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc627e Firmware	Before 25.02.10

Running on/with	Platform Versions
Siemens Simatic Ipc627e	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc647e Firmware	Before 25.02.10

Running on/with	Platform Versions
Siemens Simatic Ipc647e	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc677e Firmware	Before 25.02.10

Running on/with	Platform Versions
Siemens Simatic Ipc677e	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc847e Firmware	Before 25.02.10

Running on/with	Platform Versions
Siemens Simatic Ipc847e	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Itp1000 Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Itp1000	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Field Pg M5 Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Field Pg M5	All versions

Related CWEs

CWE-665

Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

References (6)

https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf

Source: secure@intel.com

Third Party Advisory

https://security.netapp.com/advisory/ntap-20210611-0004/

Source: secure@intel.com

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00459.html

Source: secure@intel.com

Vendor Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.netapp.com/advisory/ntap-20210611-0004/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00459.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.