Out-of-Bounds Read Vulnerability in Intel AMT and ISM
CVE-2020-8754

7.5HIGH

Key Information:

Vendor
Intel
Status
Intel(r) Amt, Intel(r) Ism
Vendor
CVE Published:
12 November 2020

Summary

An out-of-bounds read vulnerability exists within the Intel(R) Active Management Technology (AMT) and Intel(R) Industry Standard Architecture (ISM) systems. This issue allows an unauthenticated user to potentially disclose sensitive information through network access. Affected versions of these products can lead to unauthorized data exposure, emphasizing the need for immediate updates to the latest secure versions.

Affected Version(s)

Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC
https://security.netapp.com/advisory/ntap-20201113-0003/
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.