« Volver al listado

CVE-2020-0545

Estado: ModificadaMedia (4.4)—

Integer overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and Intel(R) TXE versions before 3.1.75, 4.0.25 and Intel(R) Server Platform Services (SPS) versions before SPS_E5_04.01.04.380.0, SPS_SoC-X_04.00.04.128.0, SPS_SoC-A_04.00.04.211.0, SPS_E3_04.01.04.109.0, SPS_E3_04.08.04.070.0 may allow a privileged user to potentially enable denial of service via local access.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Intel — Converged Security Management Engine FirmwareIntel — Server Platform ServicesIntel — Trusted Execution Engine

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-0545",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.4,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@intel.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Intel(R) CSME, Intel(R) TXE, and Intel(R) SPS",
          "versions": [
            {
              "status": "affected",
              "version": "See provided reference"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-06-15T14:15:11.267",
  "references": [
    {
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-631949.pdf",
      "source": "secure@intel.com"
    },
    {
      "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10321",
      "source": "secure@intel.com"
    },
    {
      "url": "https://security.netapp.com/advisory/ntap-20200611-0006/",
      "source": "secure@intel.com"
    },
    {
      "url": "https://support.lenovo.com/de/en/product_security/len-30041",
      "source": "secure@intel.com"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secure@intel.com"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secure@intel.com"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secure@intel.com"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secure@intel.com"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-631949.pdf",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10321",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://security.netapp.com/advisory/ntap-20200611-0006/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.lenovo.com/de/en/product_security/len-30041",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-190"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Integer overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and Intel(R) TXE versions before 3.1.75, 4.0.25 and Intel(R) Server Platform Services (SPS) versions before SPS_E5_04.01.04.380.0, SPS_SoC-X_04.00.04.128.0, SPS_SoC-A_04.00.04.211.0, SPS_E3_04.01.04.109.0, SPS_E3_04.08.04.070.0 may allow a privileged user to potentially enable denial of service via local access."
    },
    {
      "lang": "es",
      "value": "Un Desbordamiento de enteros en el subsistema para Intel® CSME versiones anteriores a 11.8.77, 11.12.77, 11.22.77 e Intel® TXE versiones anteriores a 3.1.75, 4.0.25 e Intel® Server Platform Services (SPS) versiones anteriores a SPS_E5_04.01.04.380.0, SPS_SoC-X_04.00.04.128.0, SPS_SoC-A_04.00.04.211.0, SPS_E3_04.01.04.109.0, SPS_E3_04.08.04.070.0, puede permitir a un usuario privilegiado habilitar potencialmente una denegación de servicio por medio de un acceso local"
    }
  ],
  "lastModified": "2026-06-17T02:46:01.347",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2CA2E306-9AEC-4767-9738-3EF0B833F896",
              "versionEndExcluding": "11.8.77",
              "versionStartIncluding": "11.0"
            },
            {
              "criteria": "cpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "299E26BE-7DB3-4D58-9C86-7634ACA11324",
              "versionEndExcluding": "11.12.77",
              "versionStartIncluding": "11.10"
            },
            {
              "criteria": "cpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E62CE07C-7068-4FE3-9268-0A551D397597",
              "versionEndExcluding": "11.22.77",
              "versionStartIncluding": "11.20"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:intel:server_platform_services:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2C055725-BF29-4702-8C8C-733329AFAC28",
              "versionEndExcluding": "sps_e3_04.01.04.109.0",
              "versionStartIncluding": "sps_e3_04.00.00.000.0"
            },
            {
              "criteria": "cpe:2.3:a:intel:server_platform_services:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2EC1103F-2B88-40E8-A8F9-5CD361F3F552",
              "versionEndExcluding": "sps_e3_04.08.04.070.0",
              "versionStartIncluding": "sps_e3_04.08.00.000.0"
            },
            {
              "criteria": "cpe:2.3:a:intel:server_platform_services:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D75D3E33-AD66-4357-A17F-90BA37833D6C",
              "versionEndExcluding": "sps_e5_04.01.04.380.0",
              "versionStartIncluding": "sps_e5_04.00.00.000.0"
            },
            {
              "criteria": "cpe:2.3:a:intel:server_platform_services:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7DF0EC03-EF67-4E17-86DF-B835C5E3A778",
              "versionEndExcluding": "sps_soc-a_04.00.04.211.0",
              "versionStartIncluding": "sps_soc-a_04.00.00.000.0"
            },
            {
              "criteria": "cpe:2.3:a:intel:server_platform_services:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "050BAFF0-7672-48B9-A59F-0940BAB2DA1A",
              "versionEndExcluding": "sps_soc-x_04.00.04.128.0",
              "versionStartIncluding": "sps_soc-x_04.00.00.000.0"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:trusted_execution_engine:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "19F4B1CA-2021-42DA-9573-F89C780EF37A",
              "versionEndExcluding": "3.1.75",
              "versionStartIncluding": "3.0"
            },
            {
              "criteria": "cpe:2.3:o:intel:trusted_execution_engine:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DDB76164-AB77-4D87-87BA-63472E1CAFA8",
              "versionEndExcluding": "4.0.25",
              "versionStartIncluding": "4.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@intel.com"
}