CVE-2020-0539: Path Traversal
First published: Mon Jun 15 2020(Updated: )
Path traversal in subsystem for Intel(R) DAL software for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 and Intel(R) TXE versions before 3.1.75, 4.0.25 may allow an unprivileged user to potentially enable denial of service via local access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel Converged Security Management Engine Firmware | >=11.0<11.8.77 | |
| Intel Converged Security Management Engine Firmware | >=11.10<11.12.77 | |
| Intel Converged Security Management Engine Firmware | >=11.20<11.22.77 | |
| Intel Converged Security Management Engine Firmware | >=12.0<12.0.64 | |
| Intel Converged Security Management Engine Firmware | >=13.0<13.0.32 | |
| Intel Converged Security Management Engine Firmware | >=14.0<14.0.33 | |
| Intel Trusted Execution Engine Firmware | >=3.0<3.1.75 | |
| Intel Trusted Execution Engine Firmware | >=4.0<4.0.25 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-0539?
CVE-2020-0539 is a vulnerability related to path traversal in the subsystem for Intel(R) DAL software for Intel(R) CSME and Intel(R) TXE versions.
What is the severity of CVE-2020-0539?
The severity of CVE-2020-0539 is medium with a severity value of 5.5.
How does CVE-2020-0539 affect Intel Converged Security Management Engine Firmware?
CVE-2020-0539 affects Intel Converged Security Management Engine Firmware versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, and 14.0.33.
How does CVE-2020-0539 affect Intel Trusted Execution Engine Firmware?
CVE-2020-0539 affects Intel Trusted Execution Engine Firmware versions before 3.1.75 and 4.0.25.
How can I fix CVE-2020-0539?
To fix CVE-2020-0539, update Intel Converged Security Management Engine Firmware to version 11.8.77 or above, and update Intel Trusted Execution Engine Firmware to version 3.1.75 or above.
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/weakness
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/intel
- canonical/intel converged security management engine firmware
- version/intel converged security management engine firmware/11.0
- version/intel converged security management engine firmware/11.10
- version/intel converged security management engine firmware/11.20
- version/intel converged security management engine firmware/12.0
- version/intel converged security management engine firmware/13.0
- version/intel converged security management engine firmware/14.0
- canonical/intel trusted execution engine firmware
- version/intel trusted execution engine firmware/3.0
- version/intel trusted execution engine firmware/4.0