CVE-2020-0545: Integer overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and Intel(R) TXE versions before 3.1.75, 4.0.25 and Intel(R) Server…

PriorityP415medium4.4CVSS 3.1

AVLACLPRHUINSUCNINAH

EPSS

0.39%

31.3th percentile

Integer overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and Intel(R) TXE versions before 3.1.75, 4.0.25 and Intel(R) Server Platform Services (SPS) versions before SPS_E5_04.01.04.380.0, SPS_SoC-X_04.00.04.128.0, SPS_SoC-A_04.00.04.211.0, SPS_E3_04.01.04.109.0, SPS_E3_04.08.04.070.0 may allow a privileged user to potentially enable denial of service via local access.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
intel	converged_security_management_engine_firmware	>= 11.0 < 11.8.77	11.8.77
intel	converged_security_management_engine_firmware	>= 11.10 < 11.12.77	11.12.77
intel	converged_security_management_engine_firmware	>= 11.20 < 11.22.77	11.22.77
intel	server_platform_services	>= sps_e3_04.00.00.000.0 < sps_e3_04.01.04.109.0	sps_e3_04.01.04.109.0
intel	server_platform_services	>= sps_e3_04.08.00.000.0 < sps_e3_04.08.04.070.0	sps_e3_04.08.04.070.0
intel	server_platform_services	>= sps_e5_04.00.00.000.0 < sps_e5_04.01.04.380.0	sps_e5_04.01.04.380.0
intel	server_platform_services	>= sps_soc-a_04.00.00.000.0 < sps_soc-a_04.00.04.211.0	sps_soc-a_04.00.04.211.0
intel	server_platform_services	>= sps_soc-x_04.00.00.000.0 < sps_soc-x_04.00.04.128.0	sps_soc-x_04.00.04.128.0
intel	trusted_execution_engine	>= 3.0 < 3.1.75	3.1.75
intel	trusted_execution_engine	>= 4.0 < 4.0.25	4.0.25

CVSS provenance

nvdv3.14.4MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.