CVE-2020-0542

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Jun 15, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-05435.5Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially CVE-2020-05447.8Insufficient control flow management in the kernel mode driver for some Intel(R) Graphics Drivers before version 15.36.39.5145 may allow an CVE-2020-05454.4Integer overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and Intel(R) TXE versions before 3.1.75, 4.0.25 CVE-2020-05467.8Unquoted service path in Intel(R) Optane(TM) DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an authenti CVE-2020-05477.8Incorrect default permissions in the installer for Intel(R) Data Migration Software versions 3.3 and earlier may allow an authenticated user CVE-2020-05485.5Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.CVE-2020-05495.5Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information d CVE-2020-05505.6Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information d CVE-2020-05515.6Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable infor CVE-2020-05534.4Out-of-bounds read in kernel mode driver for some Intel(R) Wireless Bluetooth(R) products on Windows* 10, may allow a privileged user to pot CVE-2020-05547.0Race condition in software installer for some Intel(R) Wireless Bluetooth(R) products on Windows* 7, 8.1 and 10 may allow an unprivileged us CVE-2020-05557.8Improper input validation for some Intel(R) Wireless Bluetooth(R) products may allow an authenticated user to potentially enable escalation