First published: Thu Nov 12 2020(Updated: )
Inadequate encryption strength in subsystem for Intel(R) CSME versions before 13.0.40 and 13.30.10 may allow an unauthenticated user to potentially enable information disclosure via physical access.
Credit: secure@intel.com
Affected Software | Affected Version | How to fix |
---|---|---|
Intel Converged Security And Manageability Engine | <13.0.40 | |
Intel Converged Security And Manageability Engine | >=13.30.0<13.30.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-8761 is a vulnerability in the Intel Converged Security And Manageability Engine (CSME) versions before 13.0.40 and 13.30.10 that allows an unauthenticated user with physical access to potentially enable information disclosure.
The severity of CVE-2020-8761 is medium with a CVSS score of 4.6.
CVE-2020-8761 affects Intel CSME versions before 13.0.40 and 13.30.10 by having inadequate encryption strength in its subsystem, which may enable an unauthenticated user to potentially disclose sensitive information through physical access.
Intel CSME versions before 13.0.40 and 13.30.10 are affected by CVE-2020-8761.
To fix the CVE-2020-8761 vulnerability, update Intel CSME to version 13.0.40 or 13.30.10 or later.