CVE-2020-0543: Incomplete Cleanup

Incomplete cleanup from specific special register read operations in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-0595: Use After Free

Use after free in IPv6 subsystem in IntelR AMT and IntelR ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2020-0529: Improper Initialization

Improper initialization in BIOS firmware for 8th, 9th and 10th Generation IntelR CoreTM Processor families may allow an unauthenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0532: Improper Input Validation

Improper input validation in subsystem for IntelR AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access...

CVE-2020-0540: Insufficiently Protected Credentials

Insufficiently protected credentials in IntelR AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2020-0566: Undefined Security Weakness

Improper Access Control in subsystem for IntelR TXE versions before 3.175 and 4.0.25 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2020-0586: Improper Initialization

Improper initialization in subsystem for IntelR SPS versions before SPSE304.01.04.109.0 and SPSE304.08.04.070.0 may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8675: Undefined Security Weakness

Insufficient control flow management in firmware build and signing tool for IntelR Innovation Engine before version 1.0.859 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2020-0533: Inadequate Encryption Strength

Reversible one-way hash in IntelR CSME versions before 11.8.76, 11.12.77 and 11.22.77 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access...

PT-2020-4241

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 IntelR TXE versions prior to 3.1.75, 4.0.25 Description: The issue is related to a path traversal vulnerability in the Intel Dynamic Application Loader DAL...

PT-2020-4052

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 12.0.64 IntelR CSME versions prior to 13.0.32 IntelR CSME versions prior to 14.0.33 IntelR CSME versions prior to 14.5.12 Description: The issue is caused by insufficient input validation in the DAL subsystem,...

PT-2020-4144

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 11.8.77 IntelR CSME versions prior to 11.12.77 IntelR CSME versions prior to 11.22.77 IntelR CSME versions prior to 12.0.64 IntelR CSME versions prior to 13.0.32 IntelR CSME versions prior to 14.0.33 IntelR TXE...

PT-2020-4050

Name of the Vulnerable Software and Affected Versions: IntelR TXE versions before 3.175 IntelR TXE versions before 4.0.25 Description: The issue is related to improper access control in the IntelR TXE subsystem, which may allow an unauthenticated user to potentially enable escalation of privilege...

PT-2020-4055

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 12.0.64 IntelR CSME versions prior to 13.0.32 IntelR CSME versions prior to 14.0.33 IntelR CSME versions prior to 14.5.12 Description: The issue is related to improper buffer restrictions in a subsystem, which ma...

PT-2020-4000

Name of the Vulnerable Software and Affected Versions: IntelR Innovation Engine versions prior to 1.0.859 Description: The issue is related to insufficient control flow management in the firmware build and signing tool, which may allow an unauthenticated user to potentially enable escalation of...

PT-2020-4143

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.77 IntelR AMT versions prior to 11.12.77 IntelR AMT versions prior to 11.22.77 IntelR AMT versions prior to 12.0.64 Description: The issue is related to insufficiently protected credentials in IntelR AMT, whi...

PT-2020-4053

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.77 IntelR AMT versions prior to 11.12.77 IntelR AMT versions prior to 11.22.77 IntelR AMT versions prior to 12.0.64 Description: The issue is related to improper input validation in the Intel Active Managemen...

PT-2020-4051

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 11.8.76 IntelR CSME versions prior to 11.12.77 IntelR CSME versions prior to 11.22.77 Description: The issue is related to a reversible one-way hash in IntelR CSME, which may allow a privileged user to potentiall...

PT-2020-4048

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 12.0.64 IntelR CSME versions prior to 13.0.32 IntelR CSME versions prior to 14.0.33 IntelR CSME versions prior to 14.5.12 Description: The issue is related to an out-of-bounds write in a subsystem, which may allo...

PT-2020-4045

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.76 IntelR AMT versions prior to 11.12.77 IntelR AMT versions prior to 11.22.77 IntelR AMT versions prior to 12.0.64 Description: The issue is related to improper input validation in IntelR AMT, which may allo...