CVE:CVE-2020-24506
CNNVD:CNNVD-202106-558
CSME是被称为英特尔管理引擎BIOS扩展
Intel(R) CSME 存在缓冲区错误漏洞，该漏洞源于子系统中的越界读取，该漏洞可能允许特权用户通过本地访问敏感信息，造成信息泄露。以下产品和版本受到影响：12.0.81、13.0.47、13.30.17、14.1.53 和 14.5.32 之前的版本。
solution:Upgrade intel converged_security_and_manageability_engine to a higher version than 12.0.81,13.0.47,13.30.17,14.1.53,14.5.32,and avoid the version (,12.0.81),(,13.0.47),(,13.30.17),(,14.1.53),(,14.5.32); Upgrade siemens simatic_field_pg_m6_firmware to a higher version than *; Upgrade siemens simatic_ipc627e_firmware to a higher version than 25.02.10,and avoid the version (,25.02.10); Upgrade siemens simatic_ipc647e_firmware to a higher version than 25.02.10,and avoid the version (,25.02.10); Upgrade siemens simatic_ipc677e_firmware to a higher version than 25.02.10,and avoid the version (,25.02.10); Upgrade siemens simatic_ipc847e_firmware to a higher version than 25.02.10,and avoid the version (,25.02.10)