Vulnerability Details : CVE-2020-12297
Improper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access.
Products affected by CVE-2020-12297
- cpe:2.3:a:intel:trusted_execution_technology:3.1.80:*:*:*:*:*:*:*
- cpe:2.3:a:intel:trusted_execution_technology:4.0.30:*:*:*:*:*:*:*
- Intel » Converged Security And Manageability EngineVersions from including (>=) 14.5.0 and before (<) 14.5.25cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:*
- Intel » Converged Security And Manageability EngineVersions from including (>=) 11.12.0 and before (<) 11.12.80cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:*
- Intel » Converged Security And Manageability EngineVersions from including (>=) 11.22.0 and before (<) 11.22.80cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:*
- Intel » Converged Security And Manageability EngineVersions from including (>=) 14.0 and before (<) 14.0.45cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:*
- cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:*
- Intel » Converged Security And Manageability EngineVersions from including (>=) 12.0 and before (<) 12.0.70cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-12297
0.46%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 63 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-12297
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.6
|
MEDIUM | AV:L/AC:L/Au:N/C:P/I:P/A:P |
3.9
|
6.4
|
NIST | |
|
7.8
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST |
References for CVE-2020-12297
-
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391
INTEL-SA-00391Vendor Advisory
-
https://security.netapp.com/advisory/ntap-20201113-0002/
Intel SA-00391 CSME Vulnerabilities in NetApp Products | NetApp Product SecurityThird Party Advisory
-
https://security.netapp.com/advisory/ntap-20201113-0005/
Intel SA-00391 Intel TXE Vulnerabilities in NetApp Products | NetApp Product SecurityThird Party Advisory
Jump to