CVE-2020-12297

intel converged security and manageability engine, intel trusted execution technology

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-12297

Katalog CVE

CVSS 7.8 · High EPSS 0,45%

Kerentanan pada intel converged security and manageability engine, intel trusted execution technology. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Improper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access.

Rincian

Terbit di NVD
12 November 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
EPSS (30 hari)
0,45% peluang dieksploitasi; lebih tinggi dari 37,2% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
intel converged security and manageability engine Semua versi sebelum 11.8.80
intel converged security and manageability engine Versi 11.12.0 hingga sebelum 11.12.80
intel converged security and manageability engine Versi 11.22.0 hingga sebelum 11.22.80
intel converged security and manageability engine Versi 12.0 hingga sebelum 12.0.70
intel converged security and manageability engine Versi 14.0 hingga sebelum 14.0.45
intel converged security and manageability engine Versi 14.5.0 hingga sebelum 14.5.25
intel trusted execution technology Versi 3.1.80
intel trusted execution technology Versi 4.0.30

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.