Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact
409
VMScore

CVE-2020-8745

Published: 12/11/2020 Updated: 14/10/2022
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
CVSS v3 Base Score: 6.8 | Impact Score: 5.9 | Exploitability Score: 0.9
VMScore: 409
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Insufficient control flow management in subsystem for Intel(R) CSME versions prior to 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions prior to 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

intel converged security and manageability engine

intel trusted execution technology

siemens simatic drive controller firmware

siemens simatic et200sp 1515sp pc2 firmware

siemens simatic field pg m5 firmware

siemens simatic field pg m6 firmware -

siemens simatic ipc127e firmware

siemens simatic ipc427e firmware

siemens simatic ipc477e firmware

siemens simatic ipc527g firmware

siemens simatic ipc547g firmware

siemens simatic ipc627e firmware

siemens simatic ipc647e firmware

siemens simatic ipc667e firmware

siemens simatic ipc847e firmware

siemens simatic itp1000 firmware

siemens sinumerik 828d hw pu.4 firmware

siemens sinumerik mc mcu 1720 firmware

siemens sinumerik one firmware -

siemens sinumerik 840d sl ht 10 firmware -

siemens sinumerik one ncu 1740 firmware

siemens sinumerik one ppu 1740 firmware

Vendor Advisories

HP: SUPPORT COMMUNICATION- SECURITY BULLETIN HPSBHF03703 rev. 4 - Intel® 2020.2 IPU - CSME, SPS, TXE, AMT, and DAL Security Update
Intel has informed HP of potential security vulnerabilities identified in Intel® Converged Security and Manageability Engine (CSME), Server Platform Services (SPS), Intel® Trusted Execution Engine (TXE), Intel® Dynamic Application Loader (DAL), Intel® Active Management Technology (AMT), Intel® Standard Manageability (ISM) and Intel® Dynamic A ...
HP: SUPPORT COMMUNICATION- SECURITY BULLETIN HPSBHF03703 rev. 4 - Intel® 2020.2 IPU - CSME, SPS, TXE, AMT, and DAL Security Update
Intel has informed HP of potential security vulnerabilities identified in Intel® Converged Security and Manageability Engine (CSME), Server Platform Services (SPS), Intel® Trusted Execution Engine (TXE), Intel® Dynamic Application Loader (DAL), Intel® Active Management Technology (AMT), Intel® Standard Manageability (ISM) and Intel® Dynamic A ...

ICS Advisories

https://ics-cert.us-cert.gov/advisories/44fd01d464e373b03b740d8229f60f94
Siemens Industrial PCs and CNC devices

References

NVD-CWE-noinfohttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391https://security.netapp.com/advisory/ntap-20201113-0005/https://security.netapp.com/advisory/ntap-20201113-0002/https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdfhttps://nvd.nist.govhttps://www.cisa.gov/news-events/ics-advisories/icsa-22-132-05https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-05https://support.hp.com/us-en/document/c06962103
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-6267XML injectionCVE-2024-37673CVE-2024-6266CVE-2024-30078arbitrary CVE-2024-36886CVE-2024-5346template injection
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook