Intel Trusted Execution Engine vulnerabilities

4 CVEs affecting Intel Trusted Execution Engine, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-8750, published 2020-11-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-0545, published 2020-06-15. Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days. Integer overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and Intel(R) TXE versions before 3.1.75, 4.0.25 and Intel(R) Server Platform Services (SPS) versions before…
CVE-2020-12355, published 2020-11-12. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. Authentication bypass by capture-replay in RPMB protocol message authentication subsystem in Intel(R) TXE versions before 4.0.30 may allow an unauthenticated user to potentially enable escalation of…
CVE-2020-8744, published 2020-11-12. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions before E3_05.01.04.200…
CVE-2020-8750, published 2020-11-12. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Use after free in Kernel Mode Driver for Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an authenticated user to potentially enable escalation of privilege via local access.