Modification of assumed-immutable data in subsystem in Intel(R) CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Metrics
No CVSS v4.0
Attack Vector Physical
Attack Complexity Low
Privileges Required None
Scope Unchanged
Confidentiality Impact High
Integrity Impact High
Availability Impact High
User Interaction None
No CVSS v3.0
Access Vector Local
Access Complexity Low
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial
This CVE is not in the KEV list.
The EPSS score is 0.00076.
Key SSVC decision points have not yet been added.
Affected Vendors & Products
| Vendors | Products |
|---|---|
|
Intel
Subscribe
|
B460
Subscribe
Celeron 6305
Subscribe
Celeron 6305e
Subscribe
Converged Security And Manageability Engine
Subscribe
Core I3-1000g1
Subscribe
Core I3-1000g4
Subscribe
Core I3-1000ng4
Subscribe
Core I3-1005g1
Subscribe
Core I3-10100
Subscribe
Core I3-10100e
Subscribe
Core I3-10100f
Subscribe
Core I3-10100t
Subscribe
Core I3-10100te
Subscribe
Core I3-10100y
Subscribe
Core I3-10105
Subscribe
Core I3-10105f
Subscribe
Core I3-10105t
Subscribe
Core I3-10110u
Subscribe
Core I3-10110y
Subscribe
Core I3-10300
Subscribe
Core I3-10300t
Subscribe
Core I3-10305
Subscribe
Core I3-10305t
Subscribe
Core I3-10320
Subscribe
Core I3-10325
Subscribe
Core I3-11100b
Subscribe
Core I3-1110g4
Subscribe
Core I3-1115g4
Subscribe
Core I3-1115g4e
Subscribe
Core I3-1115gre
Subscribe
Core I3-1120g4
Subscribe
Core I3-1125g4
Subscribe
Core I3 L13g4
Subscribe
Core I5-10200h
Subscribe
Core I5-10210u
Subscribe
Core I5-10210y
Subscribe
Core I5-10300h
Subscribe
Core I5-1030g4
Subscribe
Core I5-1030g7
Subscribe
Core I5-1030ng7
Subscribe
Core I5-10310u
Subscribe
Core I5-10310y
Subscribe
Core I5-1035g1
Subscribe
Core I5-1035g4
Subscribe
Core I5-1035g7
Subscribe
Core I5-1038ng7
Subscribe
Core I5-10400
Subscribe
Core I5-10400f
Subscribe
Core I5-10400h
Subscribe
Core I5-10400t
Subscribe
Core I5-10500
Subscribe
Core I5-10500e
Subscribe
Core I5-10500h
Subscribe
Core I5-10500t
Subscribe
Core I5-10500te
Subscribe
Core I5-10505
Subscribe
Core I5-10600
Subscribe
Core I5-10600k
Subscribe
Core I5-10600kf
Subscribe
Core I5-10600t
Subscribe
Core I5-11260h
Subscribe
Core I5-11300h
Subscribe
Core I5-1130g7
Subscribe
Core I5-11320h
Subscribe
Core I5-1135g7
Subscribe
Core I5-11400
Subscribe
Core I5-11400f
Subscribe
Core I5-11400h
Subscribe
Core I5-11400t
Subscribe
Core I5-1140g7
Subscribe
Core I5-1145g7
Subscribe
Core I5-1145g7e
Subscribe
Core I5-1145gre
Subscribe
Core I5-11500
Subscribe
Core I5-11500b
Subscribe
Core I5-11500h
Subscribe
Core I5-11500t
Subscribe
Core I5-1155g7
Subscribe
Core I5-11600
Subscribe
Core I5-11600k
Subscribe
Core I5-11600kf
Subscribe
Core I5-11600t
Subscribe
Core I5 L16g7
Subscribe
Core I7-10510u
Subscribe
Core I7-10510y
Subscribe
Core I7-1060g7
Subscribe
Core I7-1060ng7
Subscribe
Core I7-10610u
Subscribe
Core I7-1065g7
Subscribe
Core I7-1068ng7
Subscribe
Core I7-10700
Subscribe
Core I7-10700e
Subscribe
Core I7-10700f
Subscribe
Core I7-10700k
Subscribe
Core I7-10700kf
Subscribe
Core I7-10700t
Subscribe
Core I7-10700te
Subscribe
Core I7-10710u
Subscribe
Core I7-10750h
Subscribe
Core I7-10810u
Subscribe
Core I7-10850h
Subscribe
Core I7-10870h
Subscribe
Core I7-10875h
Subscribe
Core I7-11370h
Subscribe
Core I7-11375h
Subscribe
Core I7-11390h
Subscribe
Core I7-1160g7
Subscribe
Core I7-1165g7
Subscribe
Core I7-11700
Subscribe
Core I7-11700b
Subscribe
Core I7-11700f
Subscribe
Core I7-11700k
Subscribe
Core I7-11700kf
Subscribe
Core I7-11700t
Subscribe
Core I7-11800h
Subscribe
Core I7-1180g7
Subscribe
Core I7-11850h
Subscribe
Core I7-1185g7
Subscribe
Core I7-1185g7e
Subscribe
Core I7-1185gre
Subscribe
Core I7-1195g7
Subscribe
Core I9-10850k
Subscribe
Core I9-10885h
Subscribe
Core I9-10900
Subscribe
Core I9-10900e
Subscribe
Core I9-10900f
Subscribe
Core I9-10900k
Subscribe
Core I9-10900kf
Subscribe
Core I9-10900t
Subscribe
Core I9-10900te
Subscribe
Core I9-10910
Subscribe
Core I9-10980hk
Subscribe
Core I9-11900
Subscribe
Core I9-11900f
Subscribe
Core I9-11900h
Subscribe
Core I9-11900k
Subscribe
Core I9-11900kb
Subscribe
Core I9-11900kf
Subscribe
Core I9-11900t
Subscribe
Core I9-11950h
Subscribe
Core I9-11980hk
Subscribe
H410
Subscribe
H420e
Subscribe
H470
Subscribe
Pentium Gold 4410y
Subscribe
Pentium Gold 4415u
Subscribe
Pentium Gold 4415y
Subscribe
Pentium Gold 4417u
Subscribe
Pentium Gold 4425y
Subscribe
Pentium Gold 5405u
Subscribe
Pentium Gold 6405u
Subscribe
Pentium Gold 6500y
Subscribe
Pentium Gold 7505
Subscribe
Pentium Gold G5400
Subscribe
Pentium Gold G5400t
Subscribe
Pentium Gold G5420
Subscribe
Pentium Gold G5420t
Subscribe
Pentium Gold G5500
Subscribe
Pentium Gold G5500t
Subscribe
Pentium Gold G5600
Subscribe
Pentium Gold G5600t
Subscribe
Pentium Gold G5620
Subscribe
Pentium Gold G6400
Subscribe
Pentium Gold G6400e
Subscribe
Pentium Gold G6400t
Subscribe
Pentium Gold G6400te
Subscribe
Pentium Gold G6405
Subscribe
Pentium Gold G6405t
Subscribe
Pentium Gold G6500
Subscribe
Pentium Gold G6500t
Subscribe
Pentium Gold G6505
Subscribe
Pentium Gold G6505t
Subscribe
Pentium Gold G6600
Subscribe
Pentium Gold G6605
Subscribe
Q470
Subscribe
Q470e
Subscribe
W480
Subscribe
W480e
Subscribe
Z490
Subscribe
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
Configuration 3 [-]
| AND |
|
Configuration 4 [-]
| AND |
|
Configuration 5 [-]
| AND |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2020-17236 | Modification of assumed-immutable data in subsystem in Intel(R) CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may allow an unauthenticated user to potentially enable escalation of privilege via physical access. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: intel
Published:
Updated: 2024-08-04T15:12:09.005Z
Reserved: 2020-08-19T00:00:00
Link: CVE-2020-24516
No data.
Status : Modified
Published: 2021-06-09T19:15:09.060
Modified: 2024-11-21T05:14:57.327
Link: CVE-2020-24516
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD