Intel AMT up to 11.8.76/11.12.76/11.22.76/12.0.63 Subsystem input validation

A vulnerability classified as critical has been found in Intel AMT up to 11.8.76/11.12.76/11.22.76/12.0.63. Affected is some unknown processing of the component Subsystem. Upgrading to version 11.8.77, 11.12.77, 11.22.77 or 12.0.64 eliminates this vulnerability.

Field	06/16/2020 07:03 AM	06/16/2020 07:08 AM	10/24/2020 02:51 PM
vendor	Intel	Intel	Intel
name	AMT	AMT	AMT
version	<=11.8.76/11.12.76/11.22.76/12.0.63	<=11.8.76/11.12.76/11.22.76/12.0.63	<=11.8.76/11.12.76/11.22.76/12.0.63
component	Subsystem	Subsystem	Subsystem
risk	2	2	2
historic	0	0	0
cvss2_vuldb_basescore	5.4	5.4	5.4
cvss2_vuldb_tempscore	4.7	4.7	4.7
cvss2_vuldb_av	A	A	A
cvss2_vuldb_ac	M	M	M
cvss2_vuldb_au	N	N	N
cvss2_vuldb_ci	P	P	P
cvss2_vuldb_ii	P	P	P
cvss2_vuldb_ai	P	P	P
cvss3_meta_basescore	6.7	6.7	6.7
cvss3_meta_tempscore	6.4	6.4	6.4
cvss3_vuldb_basescore	6.3	6.3	6.3
cvss3_vuldb_tempscore	6.0	6.0	6.0
cvss3_vuldb_av	A	A	A
cvss3_vuldb_ac	L	L	L
cvss3_vuldb_pr	N	N	N
cvss3_vuldb_ui	N	N	N
cvss3_vuldb_s	U	U	U
cvss3_vuldb_c	L	L	L
cvss3_vuldb_i	L	L	L
cvss3_vuldb_a	L	L	L
date	1592179200 (06/15/2020)	1592179200 (06/15/2020)	1592179200 (06/15/2020)
url	https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html	https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html	https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
price_0day	$5k-$25k	$5k-$25k	$5k-$25k
name	Upgrade	Upgrade	Upgrade
upgrade_version	11.8.77/11.12.77/11.22.77/12.0.64	11.8.77/11.12.77/11.22.77/12.0.64	11.8.77/11.12.77/11.22.77/12.0.64
cve	CVE-2020-0532	CVE-2020-0532	CVE-2020-0532
seealso	156707 156709 156710 156711 156712 156713 156714 156715 156716 156717 156718 156720 156721 156722 156723 156724 156725 156726 156771	156707 156709 156710 156711 156712 156713 156714 156715 156716 156717 156718 156720 156721 156722 156723 156724 156725 156726 156771	156707 156709 156710 156711 156712 156713 156714 156715 156716 156717 156718 156720 156721 156722 156723 156724 156725 156726 156771
location	Website	Website	Website
cvss2_vuldb_e	ND	ND	ND
cvss2_vuldb_rl	OF	OF	OF
cvss2_vuldb_rc	ND	ND	ND
cvss3_vuldb_e	X	X	X
cvss3_vuldb_rl	O	O	O
cvss3_vuldb_rc	X	X	X
cvss3_nvd_basescore	7.1	7.1	7.1
cwe	0	20 (privilege escalation)	20 (privilege escalation)
cvss2_nvd_av		A	A
cvss2_nvd_ac		L	L
cvss2_nvd_au		N	N
cvss2_nvd_ci		P	P
cvss2_nvd_ii		N	N
cvss2_nvd_ai		P	P
cvss3_nvd_av		A	A
cvss3_nvd_ac		L	L
cvss3_nvd_pr		N	N
cvss3_nvd_ui		N	N
cvss3_nvd_s		U	U
cvss3_nvd_c		L	L
cvss3_nvd_i		N	N
cvss3_nvd_a		H	H
cve_assigned		1572220800	1572220800
cve_nvd_summary		Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.	Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.
confirm_url			https://security.netapp.com/advisory/ntap-20200611-0007/

◂ Previous Overview Next ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!