CVE:CVE-2020-24507
CNNVD:CNNVD-202106-560
CSME是被称为英特尔管理引擎BIOS扩展
Intel(R) CSME 存在信息泄露漏洞，该漏洞源于CSME的子系统初始化不当，该漏洞可能允许特权用户通过本地访问敏感信息，造成信息泄露。以下产品和版本受到影响：11.8.86、11.12.86、11.22.86、12.0.81、13.0.47、13.30.17、14.1.53、14.5.32、13.13之前版本。
solution:Upgrade intel converged_security_and_manageability_engine to a higher version than 12.0.81,13.0.47,13.30.17,14.1.53,14.5.32,11.8.86,11.12.86,11.22.86,13.50.11,15.0.22,and avoid the version (,12.0.81),(,13.0.47),(,13.30.17),(,14.1.53),(,14.5.32),(,11.8.86),(,11.12.86),(,11.22.86),(,13.50.11),(,15.0.22); Upgrade siemens simatic_field_pg_m6_firmware to a higher version than *; Upgrade siemens simatic_ipc427e_firmware to a higher version than *; Upgrade siemens simatic_ipc477e_firmware to a higher version than *; Upgrade siemens simatic_ipc477e_pro_firmware to a higher version than *; Upgrade siemens simatic_ipc527g_firmware to a higher version than *; Upgrade siemens simatic_ipc547g_firmware to a higher version than *; Upgrade siemens simatic_ipc627e_firmware to a higher version than 25.02.10,and avoid the version (,25.02.10); Upgrade siemens simatic_ipc647e_firmware to a higher version than 25.02.10,and avoid the version (,25.02.10); Upgrade siemens simatic_ipc677e_firmware to a higher version than 25.02.10,and avoid the version (,25.02.10); Upgrade siemens simatic_ipc847e_firmware to a higher version than 25.02.10,and avoid the version (,25.02.10); Upgrade siemens simatic_itp1000_firmware to a higher version than *; Upgrade siemens simatic_field_pg_m5_firmware to a higher version than *