TI-2020-00549 Aliases CVE-2020-0566 GHSA-xr97-v5rp-rx5p

Improper Access Control in subsystem for Intel(R) TXE versions before 3.175 and 4.0.25…

LOW 30Published 2020-06-15 · Updated 2024-08-04

Key facts

Attack vector: Physical
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Improper Access Control in subsystem for Intel(R) TXE versions before 3.175 and 4.0.25 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Why it matters now

EPSS 0.00472 41st percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	Intel(R) TXE	See provided reference	—	No fix listed	CNA

Intel(R) TXE Vendor— Affected See provided reference Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:o:intel:trusted_execution_engine_firmware::::::::	3.0 – 3.1.70; 4.0 – 4.0.20	Vulnerable	Intel

cpe:2.3:o:intel:trusted_execution_engine_firmware:*:*:*:*:*:*:*:* Versions 3.0 – 3.1.70; 4.0 – 4.0.20 Vulnerable ·Intel

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2020-0566
2026-10-03 Alias added: GHSA-xr97-v5rp-rx5p

References

Advisory 1

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html

Other 2

TI-2019-00147 Out-of-bounds write in Intel TXE CVSS 3.1HIGH 8.8
TI-2020-00520 Improper input validation in Intel CSME CVSS 3.1HIGH 7.5
TI-2017-03703 Multiple privilege escalations in kernel in Intel Trusted Execution Engine Firmware 3.0… CVSS 3.0HIGH 7.8
TI-2017-03700 Memory corruption in Intel Trusted Execution Engine CVSS 3.0HIGH 7.8
TI-2019-08341 Insufficient access control in hardware abstraction driver for MEInfo software for… CVSS 3.1HIGH 7.8
TI-2019-08308 Improper input validation in Intel CSME CVSS 3.1HIGH 7.8

See all 26 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences