CVE-2020-8751

low-risk
Published 2020-11-12

Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, Intel(R) TXE versions before 3.1.80 may allow an unauthenticated user to potentially enable information disclosure via physical access.

Do I need to act?

-
0.08% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
4
CVSS 4.6/10 Medium
PHYSICAL / LOW complexity

Affected Products (2)

Converged Security And Manageability Engine
Trusted Execution Technology

Affected Vendors

Intel

References (6)

Third Party Advisory https://security.netapp.com/advisory/ntap-20201113-0002/
Third Party Advisory https://security.netapp.com/advisory/ntap-20201113-0005/
Vendor Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391
Third Party Advisory https://security.netapp.com/advisory/ntap-20201113-0002/
Third Party Advisory https://security.netapp.com/advisory/ntap-20201113-0005/
Vendor Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391
23
/ 100
low-risk
Severity 16/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 7/34 · Low