CVE-2020-8751

MEDIUM

Intel(R) CSME <11.8.80 & Intel(R) TXE <3.1.80 - Info Disclosure

Title source: llm
STIX 2.1

Description

Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, Intel(R) TXE versions before 3.1.80 may allow an unauthenticated user to potentially enable information disclosure via physical access.

References (3)

Core 3
Core References
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20201113-0005/
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20201113-0002/

Scores

CVSS v3 4.6
EPSS 0.0008
EPSS Percentile 23.1%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

Status published
Products (2)
intel/converged_security_and_manageability_engine < 11.8.80
intel/trusted_execution_technology < 3.1.80
Published Nov 12, 2020
Tracked Since Feb 18, 2026