CVEvulnerability
CVE-2020-12303
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-11-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-416
Description
Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access.
Affected configurations
• intel converged security and manageability engine (< 11.8.80)
• intel converged security and manageability engine (>= 11.12.0 < 11.12.80)
• intel converged security and manageability engine (>= 11.22.0 < 11.22.80)
• intel converged security and manageability engine (>= 12.0 < 12.0.70)
• intel converged security and manageability engine (>= 14.0 < 14.0.45)
• intel converged security and manageability engine (>= 14.5.0 < 14.5.25)
• intel trusted execution technology 3.1.80
• intel trusted execution technology 4.0.30
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://security.netapp.com/advisory/ntap-20201113-0002/ Third Party Advisory
- https://security.netapp.com/advisory/ntap-20201113-0005/ Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 Vendor Advisory
- https://security.netapp.com/advisory/ntap-20201113-0002/ Third Party Advisory
- https://security.netapp.com/advisory/ntap-20201113-0005/ Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 Vendor Advisory