CVE-2020-12297: intel converged_security_and_manageability_engine
Vulnerability summary
CVE-2020-12297 is a high (CVSS 7.8) vulnerability in intel converged_security_and_manageability_engine. EPSS estimates a 0.45% chance of exploitation in the next 30 days, higher than 37.6% of scored vulnerabilities.
Timeline
- 12-11-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Improper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.45%
Chance of exploitation in the next 30 days
Percentile
38%
Versus all other CVEs
30-day change
0.00 pp
From 0.45% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Intel2 products
- converged_security_and_manageability_engine< 11.8.80 | ≥ 11.12.0, < 11.12.80 | ≥ 11.22.0, < 11.22.80 | ≥ 12.0, < 12.0.70 | ≥ 14.0, < 14.0.45 | ≥ 14.5.0, < 14.5.25
- trusted_execution_technology3.1.80 | 4.0.30
1 vendor · 2 products
References
3 links- www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391X Refsource MISCVendor Advisory