CVE-2020-8761

Published: Nov 12, 2020Modified: Jun 17, 2026

4.6

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.9 / Impact: 3.6

Source: NVD

Description

Inadequate encryption strength in subsystem for Intel(R) CSME versions before 13.0.40 and 13.30.10 may allow an unauthenticated user to potentially enable information disclosure via physical access.

Affected (2)

Products: Intel: Converged Security And Manageability Engine

Intel

1 product

Converged Security And Manageability Engine

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Intel Converged Security And Manageability Engine	Before 13.0.40
Intel Converged Security And Manageability Engine	From 13.30.0 to 13.30.10

Related CWEs

CWE-326

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (4)

https://security.netapp.com/advisory/ntap-20201113-0002/

Source: secure@intel.com

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391

Source: secure@intel.com

Vendor Advisory

https://security.netapp.com/advisory/ntap-20201113-0002/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.