NetSight
IP …
medium4.4

CVE-2020-0545

Integer overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and Intel(R) TXE versions before 3.1.75, 4.0.25 and Intel(R) Server…

Impact

Integer overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and Intel(R) TXE versions before 3.1.75, 4.0.25 and Intel(R) Server Platform Services (SPS) versions before SPS_E5_04.01.04.380.0, SPS_SoC-X_04.00.04.128.0, SPS_SoC-A_04.00.04.211.0, SPS_E3_04.01.04.109.0, SPS_E3_04.08.04.070.0 may allow a privileged user to potentially enable denial of service via local access.

Affected products

VendorProductAffected versions
IntelConverged Security Management Engine Firmware
from 11.0 before 11.8.77
from 11.10 before 11.12.77
from 11.20 before 11.22.77
IntelServer Platform Services
from sps_e3_04.00.00.000.0 before sps_e3_04.01.04.109.0
from sps_e3_04.08.00.000.0 before sps_e3_04.08.04.070.0
from sps_e5_04.00.00.000.0 before sps_e5_04.01.04.380.0
from sps_soc-a_04.00.00.000.0 before sps_soc-a_04.00.04.211.0
from sps_soc-x_04.00.00.000.0 before sps_soc-x_04.00.04.128.0
IntelTrusted Execution Engine
from 3.0 before 3.1.75
from 4.0 before 4.0.25

Weakness classification

CWE-190

References