CVE-2020-12297

Name of the Vulnerable Software and Affected Versions: Intel CSME Driver for Windows versions prior to 11.8.80 Intel CSME Driver for Windows versions prior to 11.12.80 Intel CSME Driver for Windows versions prior to 11.22.80 Intel CSME Driver for Windows versions prior to 12.0.70 Intel CSME Driver for Windows versions prior to 13.0.40 Intel CSME Driver for Windows versions prior to 13.30.10 Intel CSME Driver for Windows versions prior to 14.0.45 Intel CSME Driver for Windows versions prior to 14.5.25 Intel TXE version 3.1.80 Intel TXE version 4.0.30

Description: The issue is related to improper access control in the Installer for Intel CSME Driver and Intel TXE, which may allow an authenticated user to potentially enable escalation of privileges via local access. This is due to deficiencies in access control.

Recommendations: For Intel CSME Driver for Windows versions prior to 11.8.80, update to version 11.8.80 or later. For Intel CSME Driver for Windows versions prior to 11.12.80, update to version 11.12.80 or later. For Intel CSME Driver for Windows versions prior to 11.22.80, update to version 11.22.80 or later. For Intel CSME Driver for Windows versions prior to 12.0.70, update to version 12.0.70 or later. For Intel CSME Driver for Windows versions prior to 13.0.40, update to version 13.0.40 or later. For Intel CSME Driver for Windows versions prior to 13.30.10, update to version 13.30.10 or later. For Intel CSME Driver for Windows versions prior to 14.0.45, update to version 14.0.45 or later. For Intel CSME Driver for Windows versions prior to 14.5.25, update to version 14.5.25 or later. For Intel TXE version 3.1.80, update to a version later than 3.1.80. For Intel TXE version 4.0.30, update to a version later than 4.0.30.