CVE-2025-20067

🗓️ 12 Aug 2025 16:58:04Reported by intelType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 31 Views

Timing discrepancy in firmware for Intel CSME and Intel SPS may enable local privileged disclosure.

Reporter	Title	Published	Views	Family All 15
BDU FSTEC	The vulnerabilities of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine (CSME) and the software for remote management and monitoring of the Intel Server Platform Services (SPS) are related to manipulating an unknown input, resulting in a timing mismatch that allows a perpetrator to disclose protected information.	19 Sep 202500:00	–	bdu_fstec
CNNVD	Intel SPS和Intel CSME 安全漏洞	12 Aug 202500:00	–	cnnvd
Cvelist	CVE-2025-20067	12 Aug 202516:58	–	cvelist
EUVD	EUVD-2025-24439	3 Oct 202520:07	–	euvd
HPE Security Bulletins	HPESBCR04979 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01280, 2025.3 IPU, Intel Chipset Firmware Advisory, Multiple Vulnerabilities	4 Dec 202500:00	–	hpe
HPE Security Bulletins	HPESBHF04915 rev.2 - Certain HPE ProLiant DL/ML/XL, Alletra, Apollo, Synergy, Microserver and Edgeline Servers Using Certain Intel Processors, INTEL-SA-01280, 2025.3 IPU, Intel Chipset Firmware Advisory, Multiple Vulnerabilities	12 Aug 202500:00	–	hpe
HPE Security Bulletins	HPESBHF04928 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01280, 2025.3 IPU, Intel Chipset Firmware Advisory, Multiple Vulnerabilities	13 Aug 202500:00	–	hpe
HPE Security Bulletins	HPESBHF04937 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01280, 2025.3 IPU, Intel Chipset Firmware Advisory, Multiple Vulnerabilities	12 Feb 202600:00	–	hpe
HPE Security Bulletins	HPESBHF04944 rev.1 - HPE Superdome Flex 280 and Compute Scale-up Server 3200 Platform Servers Using Certain Intel Processors, INTEL-SA-01280, 2025.3 IPU, Intel Chipset Firmware Advisory, Multiple Vulnerabilities	1 Dec 202500:00	–	hpe
Hewlett-Packard	Intel Chipset Firmware August 2025 Security Update	17 Oct 202500:00	–	hp

[
  {
    "vendor": "n/a",
    "product": "Intel(R) CSME and Intel(R) SPS",
    "versions": [
      {
        "version": "See references",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01280.html

17 Jun 2026 08:40Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16

CVSS 46.8

EPSS0.00164

SSVC

CWE-208