Summary
Intel has published information on vulnerabilities in Intel products in November 2020. This advisory lists the Siemens Controllers that are affected by these vulnerabilities.
In this advisory we take a representative CVE from each advisory:
- “Intel CSME, SPS, TXE, AMT and DAL Advisory” Intel-SA-00391 is represented by CVE-2020-8744
- “BIOS Advisory” Intel-SA-00358 is represented by CVE-2020-0591.
Siemens is currently working on BIOS updates that include chipset microcode updates and recommends specific countermeasures for products where updates are not, or not yet available.
Vulnerabilities 2
-
Unscored —
Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially e…
-
Unscored —
Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, …
Revision history
-
#2
Updated specific mitigations; clarified that no remediation is planned
-
#1
Publication Date
References
-
SSA-501073: Vulnerabilities in Controllers CPU 1518 MFP using Intel CPUs (November 2020) - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-501073.pdf
-
SSA-501073: Vulnerabilities in Controllers CPU 1518 MFP using Intel CPUs (November 2020) - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-501073.txt