CVE-2020-24507
—CVSS 3.1
4.4 medium
EPSS
<1%p21
Published
()
Modified
Description
Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may allow a privileged user to potentially enable information disclosure via local access.
- Vendors
- intelsiemens
- Products
- converged security and manageability engine, simatic field pg m6 firmware, simatic ipc427e firmware, simatic ipc477e firmware, simatic ipc477e pro firmware, simatic ipc527g firmware, simatic ipc547g firmware, simatic ipc627e firmware, simatic ipc647e firmware, simatic ipc677e firmware, simatic ipc847e firmware, simatic itp1000 firmware
- Weakness
- CWE-665
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.