PT-2020-4057 · Intel · Intel Ism+1

Published 2020-06-09 · Updated 2021-03-18 · CVE-2020-0595

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Intel(R) AMT and Intel(R) ISM versions before 11.8.77 Intel(R) AMT and Intel(R) ISM versions before 11.12.77 Intel(R) AMT and Intel(R) ISM versions before 11.22.77 Intel(R) AMT and Intel(R) ISM versions before 12.0.64

Description: The issue is related to a use after free in the IPv6 subsystem, which may allow an unauthenticated user to potentially enable escalation of privilege via network access. This could be exploited by a remote attacker to increase their privileges.

Recommendations: For versions before 11.8.77, update to version 11.8.77 or later. For versions before 11.12.77, update to version 11.12.77 or later. For versions before 11.22.77, update to version 11.22.77 or later. For versions before 12.0.64, update to version 12.0.64 or later.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2020-04457

CVE-2020-0595

Affected Products

Intel Amt

Intel Ism

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2020-0595 · Security Note
• https://bdu.fstec.ru/vul/2020-04457 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-0595 · Vendor Advisory
• https://support.lenovo.com/de/en/product_security/len-30041 · Note
• https://t.me/opennews/6971 · Telegram Post
• https://synology.com/security/advisory/Synology_SA_20_15 · Note
• https://t.me/cvenotify/11526 · Telegram Post
• https://security.netapp.com/advisory/ntap-20200611-0007 · Note
• https://t.me/tmfeed/86833 · Telegram Post
• https://t.me/cvenotify/4361 · Telegram Post
• https://kb.cert.org/vuls/id/257161 · Note