CVE-2020-0536 PUBLISHED CVSS 7.5 HIGH

Improper input validation in the DAL subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and Intel(R) TXE versions before 3.1.75 and 4.0.25 may allow an unauthenticated user to potentially enable information disclosure via network access.

EPSS 0.72% · 72.4th percentile

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.72%
72.4th percentile

Affected Products

VendorProductVersions
inteltrusted_execution_engine_firmware4.0, 3.0
intelconverged_security_management_engine_firmware11.20, 12.0, 14.0
n/aIntel(R) CSME*

Timeline

References

Open in Interactive Console →