K45573415 : Intel software vulnerabilities CVE-2020-12297, CVE-2020-12304, CVE-2020-12354

Security Advisory Description

• CVE-2020-12297

Improper access control in Installer for Intel® CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access.

• CVE-2020-12304

Improper access control in Installer for Intel® DAL SDK before version 2.1 for Windows may allow an authenticated user to potentially enable escalation of privileges via local access.

• CVE-2020-12354

Incorrect default permissions in Windows® installer in Intel® AMT SDK versions before 14.0.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Impact

There is no impact; F5 products are not affected by this vulnerability.