CVE-2020-0533: Weak Encryption
First published: Mon Jun 15 2020(Updated: )
Reversible one-way hash in Intel(R) CSME versions before 11.8.76, 11.12.77 and 11.22.77 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel Converged Security Management Engine Firmware | >=11.0<11.8.77 | |
| Intel Converged Security Management Engine Firmware | >=11.10<11.12.77 | |
| Intel Converged Security Management Engine Firmware | >=11.20<11.22.77 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-0533?
CVE-2020-0533 is a vulnerability in Intel(R) CSME versions before 11.8.76, 11.12.77, and 11.22.77 that may allow a privileged user to enable escalation of privilege, denial of service, or information disclosure via local access.
Which software versions are affected by CVE-2020-0533?
Intel(R) CSME versions before 11.8.76, 11.12.77, and 11.22.77 are affected by CVE-2020-0533.
What is the severity of CVE-2020-0533?
CVE-2020-0533 has a severity rating of medium (6.7).
How can a privileged user exploit CVE-2020-0533?
A privileged user can potentially exploit CVE-2020-0533 to enable escalation of privilege, denial of service, or information disclosure via local access.
Is there a fix available for CVE-2020-0533?
Yes, it is recommended to upgrade to Intel(R) CSME versions 11.8.76, 11.12.77, or 11.22.77 to mitigate the vulnerability.
- collector/nvd-index
- agent/author
- agent/severity
- agent/references
- agent/tags
- agent/type
- agent/event
- agent/weakness
- agent/description
- vendor/intel
- canonical/intel converged security management engine firmware
- version/intel converged security management engine firmware/11.0
- version/intel converged security management engine firmware/11.10
- version/intel converged security management engine firmware/11.20