Description
Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Intel(R) CSME, Intel(R) TXE | Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 | — |
Advisories 2
- ICSA-22-132-05 Siemens Industrial PCs and CNC devices CISA ICS & IT advisories · Dec 13, 2022
- SSA-678983 SSA-678983: Vulnerabilities in Industrial PCs and CNC devices using Intel CPUs (November 2020) Siemens ProductCERT · Dec 13, 2022