CVE-2020-8744

CVE-2020-8744 covers an improper initialization weakness in the Intel® CSME subsystem (and related Intel® TXE and SPS components) that may permit a privileged user to escalate privileges via local access. Affected are Intel® CSME versions before 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25; In...

CVE-2020-0545

CVE-2020-0545 describes an integer overflow in the Intel CSME subsystem (and related SPS/TXE/AMT components) that may allow a privileged local attacker to cause a denial of service. Affected are Intel CSME versions before 11.8.77, 11.12.77, 11.22.77; Intel TXE before 3.1.75 and 4.0.25; and SPS fi...

CVE-2020-12355

CVE-2020-12355 affects Intel TXE RPMB: authentication bypass in the RPMB protocol message authentication subsystem prior to TXE 4.0.30, potentially allowing an unauthenticated user to escalate privileges with physical access. Red Hat and CERT references corroborate the issue; Intel’s advisory (IN...

CVE-2020-8750

CVE-2020-8750 is a use-after-free vulnerability in the Intel TXE kernel-mode driver, affecting TXE before 3.1.80 and 4.0.30. It may allow an authenticated local attacker to escalate privileges. Related advisories group this with Intel CSME/SPS/TXE/AMT/DAL family issues and recommend firmware upda...