PT-2013-5762 · Intel · Intel Trusted Execution Technology (Txt) Sinit Authenticated Code Modules

Published 2013-09-12 · Updated 2014-07-11 · CVE-2013-5740

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intel Trusted Execution Technology (TXT) SINIT Authenticated Code Modules (ACM) versions prior to 1.2

Description The issue allows local users to bypass the Trusted Execution Technology protection mechanism and perform other unspecified SINIT ACM functions. This occurs when the measured launch environment (MLE) is invoked.

Recommendations For Intel Trusted Execution Technology (TXT) SINIT Authenticated Code Modules (ACM) versions prior to 1.2, update to version 1.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2013-5740

Affected Products

Intel Trusted Execution Technology (Txt) Sinit Authenticated Code Modules

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-5740 · Security Note
• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00035&languageid=en-fr · Vendor Advisory
• http://support.citrix.com/article/CTX138633 · Note