Improper Input Validation in Intel Data Center Manager Console
CVE-2020-12347

8.8HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Data Center Manager Console
Vendor
CVE Published:
12 November 2020

What is CVE-2020-12347?

The Intel Data Center Manager Console prior to version 3.6.2 contains an improper input validation vulnerability. This weakness allows authenticated users to exploit the system via network access, potentially leading to privilege escalation. It highlights the importance of ensuring secure input handling to prevent unauthorized actions within the management console.

Affected Version(s)

Intel(R) Data Center Manager Console before version 3.6.2

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.