PT-2020-4671 · Intel · Intel Unite Client For Windows

Published 2020-11-10 · Updated 2021-07-21 · CVE-2020-0575

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel Unite Client for Windows versions prior to 4.2.13064

Description The issue is related to improper buffer restrictions, which may allow an authenticated user to enable information disclosure via local access. This is due to a buffer overflow in memory, where exploitation can lead to the disclosure of protected information.

Recommendations For versions prior to 4.2.13064, update to version 4.2.13064 or later to resolve the issue. As a temporary workaround, consider restricting local access to the Intel Unite Client for Windows until the update can be applied.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2020-05223

CVE-2020-0575

Affected Products

Intel Unite Client For Windows

References · 6

• https://osv.dev/vulnerability/CVE-2020-0575 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-0575 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00350 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-05223 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00350.html · Note
• https://cybersecurity-help.cz/vdb/SB2020111202 · Note