CVE-2020-24506
No fix known EPSS <1%
Out of bound read in a subsystem in the Intel(R) CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32 may allow a privileged user to potentially enable information disclosure via local access.
Products: intel converged_security_and_manageability_engine, siemens simatic_field_pg_m6_firmware, siemens simatic_ipc627e_firmware, siemens simatic_ipc647e_firmware, siemens simatic_ipc677e_firmware, siemens simatic_ipc847e_firmware