CVE-2020-0536

No fix known EPSS 2%

Improper input validation in the DAL subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and Intel(R) TXE versions before 3.1.75 and 4.0.25 may allow an unauthenticated user to potentially enable information disclosure via network access.

Published 2020-06-15 · CVE record · OSV

Products: intel converged_security_management_engine_firmware, intel trusted_execution_engine_firmware