← Back to CVEs
CVE-2020-0541
MEDIUM6.7
Description
Out-of-bounds write in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE Details
CVSS v3.1 Score6.7
SeverityMEDIUM
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack VectorLOCAL
ComplexityLOW
Privileges RequiredHIGH
User InteractionNONE
Published6/15/2020
Last Modified11/21/2024
Sourcenvd
Honeypot Sightings0
Affected Products
intel:converged_security_management_engine_firmware
Weaknesses (CWE)
CWE-787
References
https://security.netapp.com/advisory/ntap-20200611-0006/(secure@intel.com)
https://support.lenovo.com/de/en/product_security/len-30041(secure@intel.com)
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html(secure@intel.com)
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html(secure@intel.com)
https://security.netapp.com/advisory/ntap-20200611-0006/(af854a3a-2127-422b-91ae-364da2661108)
https://support.lenovo.com/de/en/product_security/len-30041(af854a3a-2127-422b-91ae-364da2661108)
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html(af854a3a-2127-422b-91ae-364da2661108)
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.