{"id":"CVE-2020-0542","aliases":["EUVD-2020-2040","GHSA-hfj6-fwxg-642f"],"status":"published","title":"Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14...","description":"Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00414,"percentile":0.35936,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2020-06-15T13:57:47Z","modified":"2026-06-17T02:46:00Z","products":[{"vendor":"intel","product":"converged_security_management_engine_firmware"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html","tags":["x_refsource_CONFIRM","x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20200611-0006/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://support.lenovo.com/de/en/product_security/len-30041","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-0542"},{"url":"https://github.com/advisories/GHSA-hfj6-fwxg-642f"}],"sources":{"cve":[{"id":"CVE-2020-0542","description":"Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access.","status":"published","published":"2020-06-15T13:57:47Z","modified":"2024-08-04T06:02:52.336Z","updated_at":"2026-11-02T14:35:59.763887Z"}],"euvd":[{"id":"EUVD-2020-2040","description":"Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access.","status":"published","published":"2020-06-15T13:57:47Z","modified":"2024-08-04T06:02:52Z","updated_at":"2026-11-03T03:08:19.671968Z"}],"ghsa":[{"id":"GHSA-hfj6-fwxg-642f","title":"Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14...","description":"Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access.","status":"published","published":"2022-05-24T17:20:28Z","modified":"2023-01-29T05:02:51Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:45:11.402148Z"}],"nvd":[{"id":"CVE-2020-0542","description":"Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access.","status":"published","published":"2020-06-15T14:15:11.127Z","modified":"2026-06-17T02:46:00.847Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:06:07.249892Z"}]}}