CVE-2020-8745

Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Link	Resource
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391	Vendor Advisory
https://security.netapp.com/advisory/ntap-20201113-0005/	Third Party Advisory
https://security.netapp.com/advisory/ntap-20201113-0002/	Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf	Patch Third Party Advisory

Configuration 1

cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:* cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:* cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:* cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:* cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:* cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:* cpe:2.3:a:intel:trusted_execution_technology:*:*:*:*:*:*:*:* cpe:2.3:a:intel:trusted_execution_technology:*:*:*:*:*:*:*:*

---

Published : 2020-11-12 06:15

Updated : 2022-10-14 11:23

---

NVD link : CVE-2020-8745

Mitre link : CVE-2020-8745

Siemens

Simatic Field Pg M5 Firmware

NVD-CWE-noinfo