CVE-2020-0545

MEDIUM

4.4

CVSS Score

Published: June 15, 2020 at 02:00 PM UTC

Updated: June 17, 2026 at 02:46 AM UTC

3 products affected across 1 vendorConverged Security Management EngineServer Platform ServicesTrusted Execution Engine

Using Intel(R) CSME, Intel(R) TXE, and Intel(R) SPS by N/A?

Get instant alerts when new vulnerabilities affect Intel(R) CSME, Intel(R) TXE, and Intel(R) SPS - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM4.4

Exploit prediction

EPSS 0.4%

Description

Integer overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and Intel(R) TXE versions before 3.1.75, 4.0.25 and Intel(R) Server Platform Services (SPS) versions before SPS_E5_04.01.04.380.0, SPS_SoC-X_04.00.04.128.0, SPS_SoC-A_04.00.04.211.0, SPS_E3_04.01.04.109.0, SPS_E3_04.08.04.070.0 may allow a privileged user to potentially enable denial of service via local access.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Converged Security Management Engine · Intel

95%

11.0 ≤ v < 11.8.7711.10 ≤ v < 11.12.7711.20 ≤ v < 11.22.77See provided reference

Affected range stops below 11.12.77, so it looks safe — our inference, not a vendor statement

Affected range stops below 11.22.77, so it looks safe — our inference, not a vendor statement

Affected range stops below 11.8.77, so it looks safe — our inference, not a vendor statement

Server Platform Services · Intel

95%

sps_e3_04.00.00.000.0 ≤ v < sps_e3_04.01.04.109.0sps_e3_04.08.00.000.0 ≤ v < sps_e3_04.08.04.070.0sps_e5_04.00.00.000.0 ≤ v < sps_e5_04.01.04.380.0sps_soc-a_04.00.00.000.0 ≤ v < sps_soc-a_04.00.04.211.0sps_soc-x_04.00.00.000.0 ≤ v < sps_soc-x_04.00.04.128.0See provided reference

Affected range stops below sps_e3_04.01.04.109.0, so it looks safe — our inference, not a vendor statement

Affected range stops below sps_e3_04.08.04.070.0, so it looks safe — our inference, not a vendor statement

Affected range stops below sps_e5_04.01.04.380.0, so it looks safe — our inference, not a vendor statement

Affected range stops below sps_soc-a_04.00.04.211.0, so it looks safe — our inference, not a vendor statement

Affected range stops below sps_soc-x_04.00.04.128.0, so it looks safe — our inference, not a vendor statement

Trusted Execution Engine · Intel

95%

3.0 ≤ v < 3.1.754.0 ≤ v < 4.0.25See provided reference

Affected range stops below 3.1.75, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.0.25, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html

References (5)

x_refsource_CONFIRM

Source: [email protected]

https://cert-portal.siemens.com/productcert/pdf/ssa-631949.pdf

x_refsource_CONFIRM

Source: [email protected]

https://kc.mcafee.com/corporate/index?page=content&id=SB10321

x_refsource_CONFIRM

Source: [email protected]

https://security.netapp.com/advisory/ntap-20200611-0006/

x_refsource_MISC

Source: [email protected]

https://support.lenovo.com/de/en/product_security/len-30041

x_refsource_CONFIRMx_refsource_MISCVendor Advisory

Source: [email protected]

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html

CVSS

4.4MEDIUM[email protected]

Attack Vector: LOCAL
Complexity: LOW
Privileges: HIGH
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: NONE
Integrity: NONE
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-190

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card