CVE-2020-0539

MEDIUM

Intel CSME <11.8.77/11.12.77/11.22.77/12.0.64/13.0.32/14.0.33 & TXE <3.1.75/4.0.25 - Path Traversal

Title source: llm

Description

Path traversal in subsystem for Intel(R) DAL software for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 and Intel(R) TXE versions before 3.1.75, 4.0.25 may allow an unprivileged user to potentially enable denial of service via local access.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_confirm

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html

Vendor Advisory x_refsource_confirm

https://security.netapp.com/advisory/ntap-20200611-0006/

Various Sources x_refsource_misc

https://support.lenovo.com/de/en/product_security/len-30041

Scores

CVSS v3 5.5

EPSS 0.0005

EPSS Percentile 16.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-22

Status published

Products (3)

intel/converged_security_management_engine_firmware 11.0 - 11.8.77

intel/converged_security_management_engine_firmware 12.0 - 12.0.64

intel/trusted_execution_engine_firmware 3.0 - 3.1.75

Published Jun 15, 2020

Tracked Since Feb 18, 2026