CVE-2020-24506

Out of bound read in a subsystem in the Intel(R) CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32 may allow a privileged user to potentially enable information disclosure via local access.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.4 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
intelCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 27%
VendorProductVersion
intelconverged_security_and_manageability_engine
𝑥
< 12.0.81
intelconverged_security_and_manageability_engine
𝑥
< 13.0.47
intelconverged_security_and_manageability_engine
𝑥
< 13.30.17
intelconverged_security_and_manageability_engine
𝑥
< 14.1.53
intelconverged_security_and_manageability_engine
𝑥
< 14.5.32
siemenssimatic_field_pg_m6_firmware
*
siemenssimatic_ipc627e_firmware
𝑥
< 25.02.10
siemenssimatic_ipc647e_firmware
𝑥
< 25.02.10
siemenssimatic_ipc677e_firmware
𝑥
< 25.02.10
siemenssimatic_ipc847e_firmware
𝑥
< 25.02.10
𝑥
= Vulnerable software versions