← Volver a CVEs
CVE-2020-0538
HIGH7.5
Descripcion
Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of service via network access.
Detalles CVE
Puntuacion CVSS v3.17.5
SeveridadHIGH
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioNONE
Publicado6/15/2020
Ultima modificacion11/21/2024
Fuentenvd
Avistamientos honeypot0
Productos afectados
intel:active_management_technology_firmware
Debilidades (CWE)
CWE-20
Referencias
https://security.netapp.com/advisory/ntap-20200611-0007/(secure@intel.com)
https://support.lenovo.com/de/en/product_security/len-30041(secure@intel.com)
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html(secure@intel.com)
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html(secure@intel.com)
https://security.netapp.com/advisory/ntap-20200611-0007/(af854a3a-2127-422b-91ae-364da2661108)
https://support.lenovo.com/de/en/product_security/len-30041(af854a3a-2127-422b-91ae-364da2661108)
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html(af854a3a-2127-422b-91ae-364da2661108)
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.