CVE-2020-0534

Improper input validation in the DAL subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an unauthenticated user to potentially enable denial of service via network access.

Published: Jun 15, 2020
Updated: Apr 13, 2023
CVE: CVE-2020-0534
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs:

CWE-20

Affected Software
References

Software	From	Fixed in
intel / converged_security_management_engine_firmware	12.0	12.0.64
intel / converged_security_management_engine_firmware	14.5.11	14.5.11.x
intel / converged_security_management_engine_firmware	13.0	13.0.32
intel / converged_security_management_engine_firmware	14.0	14.0.33

https://security.netapp.com/advisory/ntap-20200611-0006/
https://support.lenovo.com/de/en/product_security/len-30041
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html

Vulnerability Database

CVE-2020-0534