Description (CNA)
Improper input validation in the DAL subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and Intel(R) TXE versions before 3.1.75 and 4.0.25 may allow an unauthenticated user to potentially enable information disclosure via network access.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Intel(R) CSME | affected See provided reference |
CWE
No CWE identifiers supplied.
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
- https://security.netapp.com/advisory/ntap-20200611-0006/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
- https://support.lenovo.com/de/en/product_security/len-30041
ADP enrichment
No English description supplied.