Improper access control in Intel Trusted Execution Engine Firmware - CVE-2020-0566

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU28983

Improper access control in Intel Trusted Execution Engine Firmware - CVE-2020-0566

Published: June 12, 2020


Vulnerability identifier: #VU28983
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2020-0566
CWE-ID: CWE-284
Exploitation vector: Local access
Exploit availability: No public exploit available
Vendor: Intel
Affected software:
Intel Trusted Execution Engine Firmware

Detailed vulnerability description

The vulnerability allows a local attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions in subsystem. An attacker with physical access can bypass implemented security restrictions and gain unauthorized access to the application.

Note: This vulnerability affects the following versions of Intel TXE:
  • 3.0 through 3.1.70
  • 4.0 through 4.0.20

How to mitigate CVE-2020-0566

Install updates from vendor's website.

Sources