CVE-2020-8745: Intel Converged Security And Manageability Engine

Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Affected products

Intel Converged Security And Manageability Engine: before 11.8.80 (fixed in 11.8.80); from 11.12.0, before 11.12.80 (fixed in 11.12.80); from 11.22.0, before 11.22.80 (fixed in 11.22.80); from 12.0, before 12.0.70 (fixed in 12.0.70); from 14.0, before 14.0.45 (fixed in 14.0.45); from 14.5.0, before 14.5.25 (fixed in 14.5.25)
Intel Trusted Execution Technology: before 3.1.80 (fixed in 3.1.80); from 4.0, before 4.0.30 (fixed in 4.0.30)
Siemens SIMATIC Drive Controller Firmware: before 05.00.01.00 (fixed in 05.00.01.00)
Siemens SIMATIC ET200SP 1515sp PC2 Firmware: before 0209.0105 (fixed in 0209.0105)
Siemens SIMATIC Field Pg m5 Firmware: before 22.01.08 (fixed in 22.01.08)
Siemens SIMATIC Field Pg m6 Firmware: affected versions not specified
Siemens SIMATIC IPC127E Firmware: before 27.01.05 (fixed in 27.01.05)
Siemens SIMATIC IPC427E Firmware: before 27.01.05 (fixed in 27.01.05)
Siemens SIMATIC IPC477E Firmware: before 21.01.15 (fixed in 21.01.15)
Siemens SIMATIC IPC527G Firmware: before 1.4.0 (fixed in 1.4.0)
Siemens SIMATIC IPC547G Firmware: before r1.30.0 (fixed in r1.30.0)
Siemens SIMATIC IPC627E Firmware: before 25.02.08 (fixed in 25.02.08)
Siemens SIMATIC IPC647E Firmware: before 25.02.08 (fixed in 25.02.08)
Siemens SIMATIC IPC667E Firmware: before 25.02.08 (fixed in 25.02.08)
Siemens SIMATIC IPC847E Firmware: before 25.02.08 (fixed in 25.02.08)
Siemens SIMATIC ITP1000 Firmware: before 23.01.08 (fixed in 23.01.08)
Siemens Sinumerik 828d Hw pu.4 Firmware: before 08.00.00.00 (fixed in 08.00.00.00)
Siemens Sinumerik 840d Sl Ht 10 Firmware: affected versions not specified
Siemens Sinumerik Mc Mcu 1720 Firmware: before 05.00.00.00 (fixed in 05.00.00.00)
Siemens Sinumerik One Firmware: affected versions not specified
Siemens Sinumerik One Ncu 1740 Firmware: before 04.00.00.00 (fixed in 04.00.00.00)
Siemens Sinumerik One Ppu 1740 Firmware: before 06.00.00.00 (fixed in 06.00.00.00)

Published 2020-11-12. Last modified 2026-06-17.