PT-2020-4054 · Intel · Intel Ism+1

Published 2020-06-09 · Updated 2020-07-22 · CVE-2020-0596

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Intel(R) AMT and Intel(R) ISM versions before 11.8.77 Intel(R) AMT and Intel(R) ISM versions before 11.12.77 Intel(R) AMT and Intel(R) ISM versions before 11.22.77 Intel(R) AMT and Intel(R) ISM versions before 12.0.64

Description: The issue is related to improper input validation in the DHCPv6 subsystem, which may allow an unauthenticated user to potentially enable information disclosure via network access. This could permit a remote attacker to gain unauthorized access to protected information.

Recommendations: For versions before 11.8.77, update to version 11.8.77 or later. For versions before 11.12.77, update to version 11.12.77 or later. For versions before 11.22.77, update to version 11.22.77 or later. For versions before 12.0.64, update to version 12.0.64 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2020-04454

CVE-2020-0596

Affected Products

Intel Amt

Intel Ism

References · 8

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-0596 · Security Note
• https://osv.dev/vulnerability/CVE-2020-0596 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-04454 · Security Note
• https://support.lenovo.com/de/en/product_security/len-30041 · Note
• https://synology.com/security/advisory/Synology_SA_20_15 · Note
• https://security.netapp.com/advisory/ntap-20200611-0007 · Note
• https://t.me/cvenotify/4362 · Telegram Post