CVE-2020-12355: Medium severity intel trusted execution engine vulnerability
Authentication bypass by capture-replay in RPMB protocol message authentication subsystem in Intel(R) TXE versions before 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-12355?
CVE-2020-12355 is a vulnerability that allows an unauthenticated user to potentially enable escalation of privilege via physical access.
What is the severity of CVE-2020-12355?
CVE-2020-12355 has a severity of medium with a CVSS score of 6.8.
How does CVE-2020-12355 work?
CVE-2020-12355 works by exploiting an authentication bypass vulnerability in the RPMB protocol message authentication subsystem in Intel(R) TXE versions before 4.0.30.
Which software versions are affected by CVE-2020-12355?
Intel Trusted Execution Engine versions before 4.0.30 are affected by CVE-2020-12355.
How can I fix CVE-2020-12355?
To fix CVE-2020-12355, it is recommended to update Intel Trusted Execution Engine to version 4.0.30 or later.