Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Converged_security_management_engine_firmware | Intel | 11.0 (including) | 11.8.77 (excluding) |
| Converged_security_management_engine_firmware | Intel | 11.10 (including) | 11.12.77 (excluding) |
| Converged_security_management_engine_firmware | Intel | 11.20 (including) | 11.22.77 (excluding) |
| Converged_security_management_engine_firmware | Intel | 12.0 (including) | 12.0.64 (excluding) |
| Converged_security_management_engine_firmware | Intel | 13.0 (including) | 13.0.32 (excluding) |
| Converged_security_management_engine_firmware | Intel | 14.0 (including) | 14.0.33 (excluding) |
| Converged_security_management_engine_firmware | Intel | 14.5.11 (including) | 14.5.11 (including) |
References
- https://security.netapp.com/advisory/ntap-20200611-0006/
- https://support.lenovo.com/de/en/product_security/len-30041
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
- https://security.netapp.com/advisory/ntap-20200611-0006/
- https://support.lenovo.com/de/en/product_security/len-30041
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html