CVE-2020-24507
09.06.2021, 19:15
Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may allow a privileged user to potentially enable information disclosure via local access.Enginsight
| Vendor | Product | Version |
|---|---|---|
| intel | converged_security_and_manageability_engine | 𝑥 < 12.0.81 |
| intel | converged_security_and_manageability_engine | 𝑥 < 13.0.47 |
| intel | converged_security_and_manageability_engine | 𝑥 < 13.30.17 |
| intel | converged_security_and_manageability_engine | 𝑥 < 14.1.53 |
| intel | converged_security_and_manageability_engine | 𝑥 < 14.5.32 |
| intel | converged_security_and_manageability_engine | 𝑥 < 11.8.86 |
| intel | converged_security_and_manageability_engine | 𝑥 < 11.12.86 |
| intel | converged_security_and_manageability_engine | 𝑥 < 11.22.86 |
| intel | converged_security_and_manageability_engine | 𝑥 < 13.50.11 |
| intel | converged_security_and_manageability_engine | 𝑥 < 15.0.22 |
| siemens | simatic_field_pg_m6_firmware | * |
| siemens | simatic_ipc427e_firmware | * |
| siemens | simatic_ipc477e_firmware | * |
| siemens | simatic_ipc477e_pro_firmware | * |
| siemens | simatic_ipc527g_firmware | * |
| siemens | simatic_ipc547g_firmware | * |
| siemens | simatic_ipc627e_firmware | 𝑥 < 25.02.10 |
| siemens | simatic_ipc647e_firmware | 𝑥 < 25.02.10 |
| siemens | simatic_ipc677e_firmware | 𝑥 < 25.02.10 |
| siemens | simatic_ipc847e_firmware | 𝑥 < 25.02.10 |
| siemens | simatic_itp1000_firmware | * |
| siemens | simatic_field_pg_m5_firmware | * |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References