CVE-2020-12355: Intel Trusted Execution Engine

Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Authentication bypass by capture-replay in RPMB protocol message authentication subsystem in Intel(R) TXE versions before 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Affected products

• Intel Trusted Execution Engine: before 4.0.30 (fixed in 4.0.30)

Published 2020-11-12. Last modified 2026-06-17.