Improper Input Validation in Intel(R) CSME and TXE Subsystems: Potential Information Disclosure via Network Access

Improper Input Validation in Intel(R) CSME and TXE Subsystems: Potential Information Disclosure via Network Access

CVE-2020-0536 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Improper input validation in the DAL subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and Intel(R) TXE versions before 3.1.75 and 4.0.25 may allow an unauthenticated user to potentially enable information disclosure via network access.

Learn more about our Network Penetration Testing.