CVEvulnerability

CVE-2020-0545

4.4 MEDIUM Published 2020-06-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-06-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-190

Description

Integer overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and Intel(R) TXE versions before 3.1.75, 4.0.25 and Intel(R) Server Platform Services (SPS) versions before SPS_E5_04.01.04.380.0, SPS_SoC-X_04.00.04.128.0, SPS_SoC-A_04.00.04.211.0, SPS_E3_04.01.04.109.0, SPS_E3_04.08.04.070.0 may allow a privileged user to potentially enable denial of service via local access.

Affected configurations

• intel converged security management engine firmware (>= 11.0 < 11.8.77) • intel converged security management engine firmware (>= 11.10 < 11.12.77) • intel converged security management engine firmware (>= 11.20 < 11.22.77) • intel server platform services (>= sps e3 04.00.00.000.0 < sps e3 04.01.04.109.0) • intel server platform services (>= sps e3 04.08.00.000.0 < sps e3 04.08.04.070.0) • intel server platform services (>= sps e5 04.00.00.000.0 < sps e5 04.01.04.380.0) • intel server platform services (>= sps soc-a 04.00.00.000.0 < sps soc-a 04.00.04.211.0) • intel server platform services (>= sps soc-x 04.00.00.000.0 < sps soc-x 04.00.04.128.0) • intel trusted execution engine (>= 3.0 < 3.1.75) • intel trusted execution engine (>= 4.0 < 4.0.25)

Related

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References