CVE-2020-8756

Published: Nov 12, 2020Modified: Jun 17, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Improper input validation in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected (5)

Products: Intel: Converged Security And Manageability Engine

Intel

1 product

Converged Security And Manageability Engine

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Intel Converged Security And Manageability Engine	Before 11.8.80
Intel Converged Security And Manageability Engine	From 11.12.0 to 11.12.80
Intel Converged Security And Manageability Engine	From 11.22.0 to 11.22.80
Intel Converged Security And Manageability Engine	From 12.0 to 12.0.70
Intel Converged Security And Manageability Engine	From 14.0 to 14.0.45