high7.8
CVE-2020-8744
Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Inte…
Impact
Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions before E3_05.01.04.200 may allow a privileged user to potentially enable escalation of privilege via local access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Converged Security And Management Engine | before 12.0.70 from 13.0.0 before 13.0.40 from 13.30.0 before 13.30.10 from 14.0.0 before 14.0.45 from 14.5.0 before 14.5.25 |
| Intel | Server Platform Services | before e3_05.01.04.200 |
| Intel | Trusted Execution Engine | before 4.0.30 |
| Siemens | Simatic S7-1518-4 Pn\/Dp Mfp Firmware | All versions |
| Siemens | Simatic S7-1518f-4 Pn\/Dp Mfp Firmware | All versions |
| Siemens | Simatic S7-1500 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://cert-portal.siemens.com/productcert/pdf/ssa-501073.pdf
- https://security.netapp.com/advisory/ntap-20201113-0002/
- https://security.netapp.com/advisory/ntap-20201113-0004/
- https://security.netapp.com/advisory/ntap-20201113-0005/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391
- https://cert-portal.siemens.com/productcert/pdf/ssa-501073.pdf
- https://security.netapp.com/advisory/ntap-20201113-0002/
- https://security.netapp.com/advisory/ntap-20201113-0004/
- https://security.netapp.com/advisory/ntap-20201113-0005/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391