PT-2020-4047 · Intel · Intel Ism+1

Published 2020-06-09 · Updated 2023-05-22 · CVE-2020-0597

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Intel(R) AMT and Intel(R) ISM versions before 14.0.33

Description: The issue is related to an out-of-bounds read in the IPv6 subsystem, which may allow an unauthenticated user to potentially enable denial of service via network access. This can be exploited by a remote attacker to cause a denial of service.

Recommendations: For Intel(R) AMT and Intel(R) ISM versions before 14.0.33, update to version 14.0.33 or later to resolve the issue. At the moment, there is no other information about additional mitigation measures for this specific vulnerability.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2020-04447

CVE-2020-0597

Affected Products

Intel Amt

Intel Ism

References · 10

• https://bdu.fstec.ru/vul/2020-04447 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-0597 · Security Note
• https://osv.dev/vulnerability/CVE-2020-0597 · Vendor Advisory
• https://support.lenovo.com/de/en/product_security/len-30041 · Note
• https://t.me/cvenotify/4363 · Telegram Post
• https://t.me/cvenotify/11528 · Telegram Post
• https://synology.com/security/advisory/Synology_SA_20_15 · Note
• https://security.netapp.com/advisory/ntap-20200611-0007 · Note
• https://kb.cert.org/vuls/id/257161 · Note