CVE-2020-24506: Medium severity intel converged security and manageability engine vulnerability

Q: What is the severity of CVE-2020-24506?

The severity of CVE-2020-24506 is considered high due to potential information disclosure through out-of-bounds reads.

Q: How do I fix CVE-2020-24506?

To fix CVE-2020-24506, users should update to Intel Converged Security and Manageability Engine versions 12.0.81, 13.0.47, 13.30.17, 14.1.53, or 14.5.32.

Q: Which systems are affected by CVE-2020-24506?

CVE-2020-24506 affects various Intel systems running vulnerable versions of the Converged Security and Manageability Engine.

Q: Is local access required to exploit CVE-2020-24506?

Yes, exploitation of CVE-2020-24506 requires local access to the vulnerable system.

Q: What is the impact of CVE-2020-24506?

The impact of CVE-2020-24506 is potential information disclosure, which could expose sensitive data to privileged users.

Published Jun 9, 2021

Updated

Out of bound read in a subsystem in the Intel(R) CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32 may allow a privileged user to potentially enable information disclosure via local access.

Affected Software

224 affected components

Intel Converged Security And Manageability Engine<12.0.81

Intel B360

Intel B365

Intel C242

Intel C246

Intel Celeron 4205u

Intel Celeron 4305u

Intel Celeron 4305ue

Intel Core I3-8100

Intel Core I3-8100b

Intel Core I3-8100h

Intel Core I3-8100t

Intel Core I3-8109u

Intel Core I3-8121u

Intel Core I3-8130u

Intel Core I3-8140u

Intel Core I3-8145u

Intel Core I3-8145ue

Intel Core I3-8300

Intel Core I3-8300t

Intel Core I3-8350k

Intel Core I5-8200y

Intel Core I5-8210y

Intel Core I5-8250u

Intel Core I5-8257u

Intel Core I5-8259u

Intel Core I5-8260u

Intel Core I5-8265u

Intel Core I5-8269u

Intel Core I5-8279u

Intel Core I5-8300h

Intel Core I5-8305g

Intel Core I5-8310y

Intel Core I5-8350u

Intel Core I5-8365u

Intel Core I5-8365ue

Intel Core I5-8400

Intel Core I5-8400b

Intel Core I5-8400h

Intel Core I5-8400t

Intel Core I5-8500

Intel Core I5-8500b

Intel Core I5-8500t

Intel Core I5-8600

Intel Core I5-8600k

Intel Core I5-8600t

Intel Core I7-8086k

Intel Core I7-8500y

Intel Core I7-8550u

Intel Core I7-8557u

Intel Core I7-8559u

Intel Core I7-8565u

Intel Core I7-8569u

Intel Core I7-8650u

Intel Core I7-8665u

Intel Core I7-8665ue

Intel Core I7-8700

Intel Core I7-8700b

Intel Core I7-8700k

Intel Core I7-8700t

Intel Core I7-8705g

Intel Core I7-8706g

Intel Core I7-8709g

Intel Core I7-8750h

Intel Core I7-8809g

Intel Core I7-8850h

Intel Core I9-8950hk

Intel H310

Intel H370

Intel Mobile Cm246

Intel Pentium Gold 4410y

Intel Pentium Gold 4415u

Intel Pentium Gold 4415y

Intel Pentium Gold 4417u

Intel Pentium Gold 4425y

Intel Pentium Gold 5405u

Intel Pentium Gold 6405u

Intel Pentium Gold 6500y

Intel Pentium Gold 7505

Intel Pentium Gold G5400

Intel Pentium Gold G5400t

Intel Pentium Gold G5420

Intel Pentium Gold G5420t

Intel Pentium Gold G5500

Intel Pentium Gold G5500t

Intel Pentium Gold G5600

Intel Pentium Gold G5600t

Intel Pentium Gold G5620

Intel Pentium Gold G6400

Intel Pentium Gold G6400e

Intel Pentium Gold G6400t

Intel Pentium Gold G6400te

Intel Pentium Gold G6405

Intel Pentium Gold G6405t

Intel Pentium Gold G6500

Intel Pentium Gold G6500t

Intel Pentium Gold G6505

Intel Pentium Gold G6505t

Intel Pentium Gold G6600

Intel Pentium Gold G6605

Intel Q370

Intel Xeon W-10855m

Intel Xeon W-10885m

Intel Xeon W-11855m

Intel Xeon W-11955m

Intel Xeon W-1250

Intel Xeon W-1250e

Intel Xeon W-1250p

Intel Xeon W-1250te

Intel Xeon W-1270

Intel Xeon W-1270e

Intel Xeon W-1270p

Intel Xeon W-1270te

Intel Xeon W-1290

Intel Xeon W-1290e

Intel Xeon W-1290p

Intel Xeon W-1290t

Intel Xeon W-1290te

Intel Z370

Intel Z390

Intel Converged Security And Manageability Engine<13.0.47

Intel Core I3-1000g1

Intel Core I3-1000g4

Intel Core I3-1000ng4

Intel Core I3-1005g1

Intel Core I3-10100

Intel Core I3-10100e

Intel Core I3-10100f

Intel Core I3-10100t

Intel Core I3-10100te

Intel Core I3-10100y

Intel Core I3-10105

Intel Core I3-10105f

Intel Core I3-10105t

Intel Core I3-10110u

Intel Core I3-10110y

Intel Core I3-10300

Intel Core I3-10300t

Intel Core I3-10305

Intel Core I3-10305t

Intel Core I3-10320

Intel Core I3-10325

Intel Core I5-10200h

Intel Core I5-10210u

Intel Core I5-10210y

Intel Core I5-10300h

Intel Core I5-1030g4

Intel Core I5-1030g7

Intel Core I5-1030ng7

Intel Core I5-10310u

Intel Core I5-10310y

Intel Core I5-1035g1

Intel Core I5-1035g4

Intel Core I5-1035g7

Intel Core I5-1038ng7

Intel Core I5-10400

Intel Core I5-10400f

Intel Core I5-10400h

Intel Core I5-10400t

Intel Core I5-10500

Intel Core I5-10500e

Intel Core I5-10500h

Intel Core I5-10500t

Intel Core I5-10500te

Intel Core I5-10505

Intel Core I5-10600

Intel Core I5-10600k

Intel Core I5-10600kf

Intel Core I5-10600t

Intel Core I7-10510u

Intel Core I7-10510y

Intel Core I7-1060g7

Intel Core I7-1060ng7

Intel Core I7-10610u

Intel Core I7-1065g7

Intel Core I7-1068ng7

Intel Core I7-10700

Intel Core I7-10700e

Intel Core I7-10700f

Intel Core I7-10700k

Intel Core I7-10700kf

Intel Core I7-10700t

Intel Core I7-10700te

Intel Core I7-10710u

Intel Core I7-10750h

Intel Core I7-10810u

Intel Core I7-10850h

Intel Core I7-10870h

Intel Core I7-10875h

Intel Core I9-10850k

Intel Core I9-10885h

Intel Core I9-10900

Intel Core I9-10900e

Intel Core I9-10900f

Intel Core I9-10900k

Intel Core I9-10900kf

Intel Core I9-10900t

Intel Core I9-10900te

Intel Core I9-10910

Intel Core I9-10980hk

Intel Converged Security And Manageability Engine<13.30.17

Intel Core I3 L13g4

Intel Core I5 L16g7

Intel Converged Security And Manageability Engine<14.1.53

Intel B460

Intel H410

Intel H420e

Intel H470

Intel Q470

Intel Q470e

Intel W480

Intel W480e

Intel Z490

Intel Converged Security And Manageability Engine<14.5.32

Siemens Simatic Field Pg M6 Firmware

Siemens SIMATIC Field PG M6

Siemens Simatic Ipc627e Firmware<25.02.10

Siemens Simatic Ipc627e

Siemens Simatic Ipc647e Firmware<25.02.10

Siemens Simatic Ipc647e

Siemens Simatic Ipc677e Firmware<25.02.10

Siemens Simatic Ipc677e

Siemens Simatic Ipc847e Firmware<25.02.10

Siemens Simatic Ipc847e

Event History

Jun 9, 2021

CVE Published

via MITRE·06:48 PM

Data Sourced

via MITRE·06:48 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-24506?

The severity of CVE-2020-24506 is considered high due to potential information disclosure through out-of-bounds reads.

How do I fix CVE-2020-24506?

To fix CVE-2020-24506, users should update to Intel Converged Security and Manageability Engine versions 12.0.81, 13.0.47, 13.30.17, 14.1.53, or 14.5.32.

Which systems are affected by CVE-2020-24506?

CVE-2020-24506 affects various Intel systems running vulnerable versions of the Converged Security and Manageability Engine.

Is local access required to exploit CVE-2020-24506?

Yes, exploitation of CVE-2020-24506 requires local access to the vulnerable system.

What is the impact of CVE-2020-24506?