MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2020-24507

CVSS 4.4v3.1pub. 2021-06-09upd. 2024-11-21

Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may allow a privileged user to potentially enable information disclosure via local access.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

  • Intel B360

    HW
    Intel
    all versions

  • Intel B365

    HW
    Intel
    all versions

  • Intel C242

    HW
    Intel
    all versions

  • Intel C246

    HW
    Intel
    all versions

  • Intel Celeron 4205u

    HW
    Intel
    all versions

  • Intel Celeron 4305u

    HW
    Intel
    all versions

  • Intel Celeron 4305ue

    HW
    Intel
    all versions

  • Intel Converged Security And Manageability Engine

    APP
    Intel
    < 12.0.81

  • Intel Core I3 8100

    HW
    Intel
    all versions

  • Intel Core I3 8100b

    HW
    Intel
    all versions

  • Intel Core I3 8100h

    HW
    Intel
    all versions

  • Intel Core I3 8100t

    HW
    Intel
    all versions

  • Intel Core I3 8109u

    HW
    Intel
    all versions

  • Intel Core I3 8121u

    HW
    Intel
    all versions

  • Intel Core I3 8130u

    HW
    Intel
    all versions

  • Intel Core I3 8140u

    HW
    Intel
    all versions

  • Intel Core I3 8145u

    HW
    Intel
    all versions

  • Intel Core I3 8145ue

    HW
    Intel
    all versions

  • Intel Core I3 8300

    HW
    Intel
    all versions

  • Intel Core I3 8300t

    HW
    Intel
    all versions

  • Intel Core I3 8350k

    HW
    Intel
    all versions

  • Intel Core I5 8200y

    HW
    Intel
    all versions

  • Intel Core I5 8210y

    HW
    Intel
    all versions

  • Intel Core I5 8250u

    HW
    Intel
    all versions

  • Intel Core I5 8257u

    HW
    Intel
    all versions

  • Intel Core I5 8259u

    HW
    Intel
    all versions

  • Intel Core I5 8260u

    HW
    Intel
    all versions

  • Intel Core I5 8265u

    HW
    Intel
    all versions

  • Intel Core I5 8269u

    HW
    Intel
    all versions

  • Intel Core I5 8279u

    HW
    Intel
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2024-0762HIGH7.5same product

Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for select Intel platform...

CVE-2023-22293HIGH8.2same product

Improper access control in the Intel(R) Thunderbolt(TM) DCH drivers for Windows may allow an authenticated use...

CVE-2022-36392HIGH8.6same product

Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before version...

CVE-2022-21198HIGH7.9same product

Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privile...

CVE-2021-0099HIGH7.8same product

Insufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated u...