CVE-2020-12303

intel converged security and manageability engine, intel trusted execution technology

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-12303

Katalog CVE

CVSS 7.8 · High EPSS 0,37%

Kerentanan Use After Free pada intel converged security and manageability engine, intel trusted execution technology. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access.

Rincian

Terbit di NVD
12 November 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-416: Use After Free
EPSS (30 hari)
0,37% peluang dieksploitasi; lebih tinggi dari 28,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
intel converged security and manageability engine Semua versi sebelum 11.8.80
intel converged security and manageability engine Versi 11.12.0 hingga sebelum 11.12.80
intel converged security and manageability engine Versi 11.22.0 hingga sebelum 11.22.80
intel converged security and manageability engine Versi 12.0 hingga sebelum 12.0.70
intel converged security and manageability engine Versi 14.0 hingga sebelum 14.0.45
intel converged security and manageability engine Versi 14.5.0 hingga sebelum 14.5.25
intel trusted execution technology Versi 3.1.80
intel trusted execution technology Versi 4.0.30

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.