CVE-2020-0536

HIGH

Intel CSME and TXE Firmware < 11.8.77, < 12.0.64, < 3.1.75 - Unauthenticated Information Disclosure via DAL Subsystem

Title source: llm

Description

Improper input validation in the DAL subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and Intel(R) TXE versions before 3.1.75 and 4.0.25 may allow an unauthenticated user to potentially enable information disclosure via network access.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_confirm

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html

Vendor Advisory x_refsource_confirm

https://security.netapp.com/advisory/ntap-20200611-0006/

Various Sources x_refsource_misc

https://support.lenovo.com/de/en/product_security/len-30041

Scores

CVSS v3 7.5

EPSS 0.0073

EPSS Percentile 72.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-20

Status published

Products (3)

intel/converged_security_management_engine_firmware 11.0 - 11.8.77

intel/converged_security_management_engine_firmware 12.0 - 12.0.64

intel/trusted_execution_engine_firmware 3.0 - 3.1.75

Published Jun 15, 2020

Tracked Since Feb 18, 2026