Privileged information disclosure via firmware timing side channel

Observable timing discrepancy in Intel CSME and Intel SPS firmware allows local users with elevated privileges to disclose sensitive information. Intel has not disclosed the affected firmware operation or which secret-dependent paths produce distinguishable execution times. Exploitation requires elevated local access and unspecified additional attack conditions; the reported consequence is information disclosure only.