Vulnerability in Intel Converged_security_management_engine_firmware
CVE-2020-0542
Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service vi…
EPSS: 0.004 (31.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Intel Converged_security_management_engine_firmware — versions 14.5.11
- N/a Intel(r) Csme — versions See provided reference
References
- secure@intel.com (x_refsource_CONFIRM, x_refsource_MISC, Vendor Advisory)
- secure@intel.com (x_refsource_CONFIRM)
- secure@intel.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-0542?
- CVE-2020-0542 is a high-severity vulnerability in Intel Converged_security_management_engine_firmware. CVSS score: 7.8/10. Published 2020-06-15.
- How severe is CVE-2020-0542?
- High severity. CVSS v3 base score is 7.8 out of 10.