Intel® June 2020 Security Vulnerability Update (INTEL-SA-00295, INTEL-SA-00320, INTEL-SA-00322, INTEL-SA-00329)
Reference:
Security vulnerabilities (INTEL-SA-00295, INTEL-SA-00320, INTEL-SA-00322, INTEL-SA-00329)
Intel® Corporation (hereinafter Intel®) has reported that there is a vulnerability in "Intel® Management Engine Firmware". Intel is releasing firmware and software updates to mitigate these potential vulnerabilities. Please refer to the following solutions and take the appropriate action.
Vulnerability Summary:
Heap overflow in subsystem in Intel® CSME before versions 11.8.77, 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
Details about the vulnerability:
For details, please see the following web pages.
Remediation:
Updates may consist of BIOS and/or Intel® Drivers.
Affected Products: