2 lines
5.3 KiB
JSON
2 lines
5.3 KiB
JSON
{"affected":[{"affectedData":[{"product":"Intel(R) CSME","vendor":"n/a","versions":[{"status":"affected","version":"See provided reference"}]}],"source":"secure@intel.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"2CA2E306-9AEC-4767-9738-3EF0B833F896","versionEndExcluding":"11.8.77","versionStartIncluding":"11.0","vulnerable":true},{"criteria":"cpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"299E26BE-7DB3-4D58-9C86-7634ACA11324","versionEndExcluding":"11.12.77","versionStartIncluding":"11.10","vulnerable":true},{"criteria":"cpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"E62CE07C-7068-4FE3-9268-0A551D397597","versionEndExcluding":"11.22.77","versionStartIncluding":"11.20","vulnerable":true},{"criteria":"cpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:undefined","matchCriteriaId":"7A86A849-7161-4EA0-B1CF-4E74A55D2E67","versionEndExcluding":"12.0.64","versionStartIncluding":"12.0","vulnerable":true},{"criteria":"cpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"51B0E191-66BD-49B1-B745-F63006AD2A6F","versionEndExcluding":"13.0.32","versionStartIncluding":"13.0","vulnerable":true},{"criteria":"cpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"004EE62A-979B-4D9B-928D-B2558CE79B4E","versionEndExcluding":"14.0.33","versionStartIncluding":"14.0","vulnerable":true},{"criteria":"cpe:2.3:o:intel:converged_security_management_engine_firmware:14.5.11:*:*:*:*:*:*:*","matchCriteriaId":"9FB809FC-A7A5-4513-AD89-BB32DCAEF8FF","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access."},{"lang":"es","value":"Unas restricciones de búfer inapropiadas en el subsistema para Intel® CSME versiones anteriores a 12.0.64, 13.0.32, 14.0.33 y 14.5.12, pueden permitir a un usuario autenticado habilitar potencialmente una escalada de privilegios, una divulgación de información o una denegación de servicio por medio de un acceso local"}],"id":"CVE-2020-0542","lastModified":"2026-06-17T02:46:00.847","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":4.6,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":3.9,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-06-15T14:15:11.127","references":[{"source":"secure@intel.com","url":"https://security.netapp.com/advisory/ntap-20200611-0006/"},{"source":"secure@intel.com","url":"https://support.lenovo.com/de/en/product_security/len-30041"},{"source":"secure@intel.com","tags":["Vendor Advisory"],"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html"},{"source":"secure@intel.com","tags":["Vendor Advisory"],"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html"},{"source":"secure@intel.com","tags":["Vendor Advisory"],"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html"},{"source":"secure@intel.com","tags":["Vendor Advisory"],"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://security.netapp.com/advisory/ntap-20200611-0006/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://support.lenovo.com/de/en/product_security/len-30041"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html"}],"sourceIdentifier":"secure@intel.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|