PT-2020-4055 · Intel · Intel Csme
Published
2020-06-09
·
Updated
2021-07-21
·
CVE-2020-0542
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Intel(R) CSME versions prior to 12.0.64
Intel(R) CSME versions prior to 13.0.32
Intel(R) CSME versions prior to 14.0.33
Intel(R) CSME versions prior to 14.5.12
Description:
The issue is related to improper buffer restrictions in a subsystem, which may allow an authenticated user to potentially enable escalation of privilege, information disclosure, or denial of service via local access. This is due to a buffer overflow in memory, which can be exploited by an attacker to gain elevated privileges, disclose protected information, or cause a denial of service.
Recommendations:
For versions prior to 12.0.64, update to version 12.0.64 or later.
For versions prior to 13.0.32, update to version 13.0.32 or later.
For versions prior to 14.0.33, update to version 14.0.33 or later.
For versions prior to 14.5.12, update to version 14.5.12 or later.
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Intel Csme