Intel Trusted Execution Technology vulnerabilities

7 CVEs affecting Intel Trusted Execution Technology, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-8751, published 2020-11-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-0066, published 2009-01-07. High severity, CVSS 7.6. EPSS: 2.2% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in Intel system software for Trusted Execution Technology (TXT) allow attackers to bypass intended loader integrity protections, as demonstrated by exploitation…
CVE-2019-0091, published 2019-05-17. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Code injection vulnerability in installer for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable…
CVE-2020-8705, published 2020-11-12. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions…
CVE-2020-12297, published 2020-11-12. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Improper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel TXE 3.1.80, 4.0.30 may…
CVE-2020-8751, published 2020-11-12. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, Intel(R) TXE versions before 3.1.80 may allow an unauthenticated user to potentially enable information…
CVE-2020-8745, published 2020-11-12. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80…
CVE-2020-12303, published 2020-11-12. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE 3.1.80, 4.0.30 may allow an authenticated…