CVE-2020-24507

Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may allow a privileged user to potentially enable information disclosure via local access.

• intel converged security and manageability engine (< 12.0.81) • intel converged security and manageability engine (< 13.0.47) • intel converged security and manageability engine (< 13.30.17) • intel converged security and manageability engine (< 14.1.53) • intel converged security and manageability engine (< 14.5.32) • intel converged security and manageability engine (< 11.8.86) • intel converged security and manageability engine (< 11.12.86) • intel converged security and manageability engine (< 11.22.86) • intel converged security and manageability engine (< 13.50.11) • intel converged security and manageability engine (< 15.0.22) • siemens simatic field pg m6 firmware • siemens simatic ipc427e firmware • siemens simatic ipc477e firmware • siemens simatic ipc477e pro firmware • siemens simatic ipc527g firmware • siemens simatic ipc547g firmware • siemens simatic ipc627e firmware (< 25.02.10) • siemens simatic ipc647e firmware (< 25.02.10) • siemens simatic ipc677e firmware (< 25.02.10) • siemens simatic ipc847e firmware (< 25.02.10) • siemens simatic itp1000 firmware • siemens simatic field pg m5 firmware