{"id":"CVE-2020-12303","aliases":["EUVD-2020-4615","GHSA-hwgw-9wx9-2x6f"],"status":"published","title":"Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12...","description":"Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00369,"percentile":0.31119,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-416"],"published":"2020-11-12T18:07:22Z","modified":"2026-06-17T02:51:36Z","products":[{"vendor":"intel","product":"converged_security_and_manageability_engine"},{"vendor":"intel","product":"trusted_execution_technology"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20201113-0005/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20201113-0002/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-12303"},{"url":"https://github.com/advisories/GHSA-hwgw-9wx9-2x6f"}],"sources":{"cve":[{"id":"CVE-2020-12303","description":"Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access.","status":"published","published":"2020-11-12T18:07:22Z","modified":"2024-08-04T11:56:52.03Z","updated_at":"2026-11-02T14:35:52.925152Z"}],"euvd":[{"id":"EUVD-2020-4615","description":"Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access.","status":"published","published":"2020-11-12T18:07:22Z","modified":"2024-08-04T11:56:52Z","updated_at":"2026-11-03T03:07:40.388635Z"}],"ghsa":[{"id":"GHSA-hwgw-9wx9-2x6f","title":"Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12...","description":"Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access.","status":"published","published":"2022-05-24T17:33:32Z","modified":"2023-01-29T05:04:24Z","cwes":["CWE-416"],"updated_at":"2026-11-02T14:45:32.675365Z"}],"nvd":[{"id":"CVE-2020-12303","description":"Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access.","status":"published","published":"2020-11-12T18:15:13.517Z","modified":"2026-06-17T02:51:36.11Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:06:24.137599Z"}]}}