CVE-2020-0539

Path traversal in subsystem for Intel(R) DAL software for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 and Intel(R) TXE versions before 3.1.75, 4.0.25 may allow an unprivileged user to potentially enable denial of service via local access.

Score

CVSS 3.1 5.5 Medium

Status

Modified - secure@intel.com

Published

2020-06-15

Last modified

2024-08-04

Weaknesses

CWE-22

Affected products

• Converged Security Management Engine Firmware (Intel)
• Trusted Execution Engine Firmware (Intel)

References

• https://security.netapp.com/advisory/ntap-20200611-0006/
• https://support.lenovo.com/de/en/product_security/len-30041
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html