Description
Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, Intel(R) TXE versions before 3.1.80 may allow an unauthenticated user to potentially enable information disclosure via physical access.
Metrics
CVSS 3.1 4.6/10
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | Intel(R) CSME, Intel(R) TXE | versions before 11.8.80, Intel(R) TXE versions before 3.1.80 |
References
- https://security.netapp.com/advisory/ntap-20201113-0002/Third Party Advisory
- https://security.netapp.com/advisory/ntap-20201113-0005/Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391Vendor Advisory
- https://security.netapp.com/advisory/ntap-20201113-0002/Third Party Advisory
- https://security.netapp.com/advisory/ntap-20201113-0005/Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391Vendor Advisory
Timeline
- Published
- Nov 12, 2020
- Last modified
- Jun 17, 2026
- NVD status
- Modified