ZeroHour

CVE-2020-8745

CVSS 3.1
6.8 medium
EPSS
<1%p32
Published
()
Modified
Description

Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Vendors
intelsiemens
Products
converged security and manageability engine, trusted execution technology, simatic drive controller firmware, simatic et200sp 1515sp pc2 firmware, simatic field pg m5 firmware, simatic field pg m6 firmware, simatic ipc127e firmware, simatic ipc427e firmware, simatic ipc477e firmware, simatic ipc527g firmware, simatic ipc547g firmware, simatic ipc627e firmware
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.