Intel AMT up to 11.8.76/11.12.76/11.22.76/12.0.63 Subsystem input validation

Summaryinfo

A vulnerability was found in Intel AMT up to 11.8.76/11.12.76/11.22.76/12.0.63. It has been declared as critical. This affects an unknown part of the component Subsystem. The manipulation results in input validation. This vulnerability was named CVE-2020-0532. The attack needs to be approached within the local network. There is no available exploit. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability classified as critical has been found in Intel AMT up to 11.8.76/11.12.76/11.22.76/12.0.63. Affected is some unknown processing of the component Subsystem. The manipulation with an unknown input leads to a input validation vulnerability. CWE is classifying the issue as CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.

The weakness was presented 06/15/2020 (Website). The advisory is shared for download at intel.com. This vulnerability is traded as CVE-2020-0532 since 10/28/2019. Access to the local network is required for this attack to succeed. The exploitation doesn't require any form of authentication. There are neither technical details nor an exploit publicly available.

Upgrading to version 11.8.77, 11.12.77, 11.22.77 or 12.0.64 eliminates this vulnerability.

See VDB-156707, VDB-156709, VDB-156710 and VDB-156711 for similar entries. Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• Intel

Name

• AMT

Version

• 11.8.0
• 11.8.1
• 11.8.2
• 11.8.3
• 11.8.4
• 11.8.5
• 11.8.6
• 11.8.7
• 11.8.8
• 11.8.9
• 11.8.10
• 11.8.11
• 11.8.12
• 11.8.13
• 11.8.14
• 11.8.15
• 11.8.16
• 11.8.17
• 11.8.18
• 11.8.19
• 11.8.20
• 11.8.21
• 11.8.22
• 11.8.23
• 11.8.24
• 11.8.25
• 11.8.26
• 11.8.27
• 11.8.28
• 11.8.29
• 11.8.30
• 11.8.31
• 11.8.32
• 11.8.33
• 11.8.34
• 11.8.35
• 11.8.36
• 11.8.37
• 11.8.38
• 11.8.39
• 11.8.40
• 11.8.41
• 11.8.42
• 11.8.43
• 11.8.44
• 11.8.45
• 11.8.46
• 11.8.47
• 11.8.48
• 11.8.49
• 11.8.50
• 11.8.51
• 11.8.52
• 11.8.53
• 11.8.54
• 11.8.55
• 11.8.56
• 11.8.57
• 11.8.58
• 11.8.59
• 11.8.60
• 11.8.61
• 11.8.62
• 11.8.63
• 11.8.64
• 11.8.65
• 11.8.66
• 11.8.67
• 11.8.68
• 11.8.69
• 11.8.70
• 11.8.71
• 11.8.72
• 11.8.73
• 11.8.74
• 11.8.75
• 11.8.76
• 11.12.0
• 11.12.1
• 11.12.2
• 11.12.3
• 11.12.4
• 11.12.5
• 11.12.6
• 11.12.7
• 11.12.8
• 11.12.9
• 11.12.10
• 11.12.11
• 11.12.12
• 11.12.13
• 11.12.14
• 11.12.15
• 11.12.16
• 11.12.17
• 11.12.18
• 11.12.19
• 11.12.20
• 11.12.21
• 11.12.22
• 11.12.23
• 11.12.24
• 11.12.25
• 11.12.26
• 11.12.27
• 11.12.28
• 11.12.29
• 11.12.30
• 11.12.31
• 11.12.32
• 11.12.33
• 11.12.34
• 11.12.35
• 11.12.36
• 11.12.37
• 11.12.38
• 11.12.39
• 11.12.40
• 11.12.41
• 11.12.42
• 11.12.43
• 11.12.44
• 11.12.45
• 11.12.46
• 11.12.47
• 11.12.48
• 11.12.49
• 11.12.50
• 11.12.51
• 11.12.52
• 11.12.53
• 11.12.54
• 11.12.55
• 11.12.56
• 11.12.57
• 11.12.58
• 11.12.59
• 11.12.60
• 11.12.61
• 11.12.62
• 11.12.63
• 11.12.64
• 11.12.65
• 11.12.66
• 11.12.67
• 11.12.68
• 11.12.69
• 11.12.70
• 11.12.71
• 11.12.72
• 11.12.73
• 11.12.74
• 11.12.75
• 11.12.76
• 11.22.0
• 11.22.1
• 11.22.2
• 11.22.3
• 11.22.4
• 11.22.5
• 11.22.6
• 11.22.7
• 11.22.8
• 11.22.9
• 11.22.10
• 11.22.11
• 11.22.12
• 11.22.13
• 11.22.14
• 11.22.15
• 11.22.16
• 11.22.17
• 11.22.18
• 11.22.19
• 11.22.20
• 11.22.21
• 11.22.22
• 11.22.23
• 11.22.24
• 11.22.25
• 11.22.26
• 11.22.27
• 11.22.28
• 11.22.29
• 11.22.30
• 11.22.31
• 11.22.32
• 11.22.33
• 11.22.34
• 11.22.35
• 11.22.36
• 11.22.37
• 11.22.38
• 11.22.39
• 11.22.40
• 11.22.41
• 11.22.42
• 11.22.43
• 11.22.44
• 11.22.45
• 11.22.46
• 11.22.47
• 11.22.48
• 11.22.49
• 11.22.50
• 11.22.51
• 11.22.52
• 11.22.53
• 11.22.54
• 11.22.55
• 11.22.56
• 11.22.57
• 11.22.58
• 11.22.59
• 11.22.60
• 11.22.61
• 11.22.62
• 11.22.63
• 11.22.64
• 11.22.65
• 11.22.66
• 11.22.67
• 11.22.68
• 11.22.69
• 11.22.70
• 11.22.71
• 11.22.72
• 11.22.73
• 11.22.74
• 11.22.75
• 11.22.76
• 12.0.0
• 12.0.1
• 12.0.2
• 12.0.3
• 12.0.4
• 12.0.5
• 12.0.6
• 12.0.7
• 12.0.8
• 12.0.9
• 12.0.10
• 12.0.11
• 12.0.12
• 12.0.13
• 12.0.14
• 12.0.15
• 12.0.16
• 12.0.17
• 12.0.18
• 12.0.19
• 12.0.20
• 12.0.21
• 12.0.22
• 12.0.23
• 12.0.24
• 12.0.25
• 12.0.26
• 12.0.27
• 12.0.28
• 12.0.29
• 12.0.30
• 12.0.31
• 12.0.32
• 12.0.33
• 12.0.34
• 12.0.35
• 12.0.36
• 12.0.37
• 12.0.38
• 12.0.39
• 12.0.40
• 12.0.41
• 12.0.42
• 12.0.43
• 12.0.44
• 12.0.45
• 12.0.46
• 12.0.47
• 12.0.48
• 12.0.49
• 12.0.50
• 12.0.51
• 12.0.52
• 12.0.53
• 12.0.54
• 12.0.55
• 12.0.56
• 12.0.57
• 12.0.58
• 12.0.59
• 12.0.60
• 12.0.61
• 12.0.62
• 12.0.63

License

• commercial

Website

• Vendor: https://www.intel.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion