Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2020-0545

Integer overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and Intel(R) TXE versions before 3.1.75, 4.0.25 and Intel(R) Server Platform Services (SPS) versions before SPS_E5_04.01.04.380.0, SPS_SoC-X_04.00.04.128.0, SPS_SoC-A_04.00.04.211.0, SPS_E3_04.01.04.109.0, SPS_E3_04.08.04.070.0 may allow a privileged user to potentially enable denial of service via local access.

  • Published: Jun 15, 2020
  • Updated: Apr 13, 2023
  • CVE: CVE-2020-0545
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.4
  • AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

  • Severity: Low
  • Score: 2.1
  • AV:L/AC:L/Au:N/C:N/I:N/A:P

CWEs:

Software From Fixed in
intel / converged_security_management_engine_firmware 11.0 11.8.77
intel / converged_security_management_engine_firmware 11.20 11.22.77
intel / converged_security_management_engine_firmware 11.10 11.12.77
intel / server_platform_services sps_e3_04.08.00.000.0 sps_e3_04.08.04.070.0
intel / server_platform_services sps_e3_04.00.00.000.0 sps_e3_04.01.04.109.0
intel / server_platform_services sps_soc-a_04.00.00.000.0 sps_soc-a_04.00.04.211.0
intel / server_platform_services sps_soc-x_04.00.00.000.0 sps_soc-x_04.00.04.128.0
intel / server_platform_services sps_e5_04.00.00.000.0 sps_e5_04.01.04.380.0
intel / trusted_execution_engine 4.0 4.0.25
intel / trusted_execution_engine 3.0 3.1.75