CVE-2020-8761: Intel Converged Security And Manageability Engine

Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days.

Inadequate encryption strength in subsystem for Intel(R) CSME versions before 13.0.40 and 13.30.10 may allow an unauthenticated user to potentially enable information disclosure via physical access.

Affected products

• Intel Converged Security And Manageability Engine: before 13.0.40 (fixed in 13.0.40); from 13.30.0, before 13.30.10 (fixed in 13.30.10)

Published 2020-11-12. Last modified 2026-06-17.