PT-2020-4048 · Intel · Intel Csme
Published
2020-06-09
·
Updated
2020-07-22
·
CVE-2020-0541
CVSS v2.0
6.8
Medium
| Vector | AV:L/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Intel(R) CSME versions prior to 12.0.64
Intel(R) CSME versions prior to 13.0.32
Intel(R) CSME versions prior to 14.0.33
Intel(R) CSME versions prior to 14.5.12
Description:
The issue is related to an out-of-bounds write in a subsystem, which may allow a privileged user to potentially enable escalation of privilege via local access. This is a result of a buffer overflow vulnerability in the implementation of the Intel Converged Security and Manageability Engine technology.
Recommendations:
For Intel(R) CSME versions prior to 12.0.64, update to version 12.0.64 or later.
For Intel(R) CSME versions prior to 13.0.32, update to version 13.0.32 or later.
For Intel(R) CSME versions prior to 14.0.33, update to version 14.0.33 or later.
For Intel(R) CSME versions prior to 14.5.12, update to version 14.5.12 or later.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Intel Csme