CVE-2020-8745

Name of the Vulnerable Software and Affected Versions: Intel Converged Security and Manageability Engine (CSME) versions prior to 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45, and 14.5.25 Intel Trusted Execution Engine (TXE) versions prior to 3.1.80 and 4.0.30

Description: The issue is related to insufficient control flow management in the subsystem, which may allow an unauthenticated user to potentially enable escalation of privilege via physical access. This could permit an attacker to elevate their privileges.

Recommendations: For Intel Converged Security and Manageability Engine (CSME) versions prior to 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45, and 14.5.25, update to a version that includes the necessary security patches. For Intel Trusted Execution Engine (TXE) versions prior to 3.1.80 and 4.0.30, update to a version that includes the necessary security patches. As a temporary workaround, consider restricting physical access to the system to minimize the risk of exploitation.