Reversible one-way hash in Intel(R) CSME versions before 11.8.76, 11.12.77 and 11.22.77 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0533
Reference (s):
- https://security.netapp.com/advisory/ntap-20200611-0006/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
- https://support.lenovo.com/de/en/product_security/len-30041
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
- URL: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html