PT-2020-4865 · Intel · Intel Ism+1

Published

2020-11-10

·

Updated

2023-05-22

·

CVE-2020-8752

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Intel(R) AMT versions before 11.8.80 Intel(R) AMT versions before 11.12.80 Intel(R) AMT versions before 11.22.80 Intel(R) AMT versions before 12.0.70 Intel(R) AMT versions before 14.0.45 Intel(R) ISM versions before 11.8.80 Intel(R) ISM versions before 11.12.80 Intel(R) ISM versions before 11.22.80 Intel(R) ISM versions before 12.0.70 Intel(R) ISM versions before 14.0.45
Description: The issue is related to an out-of-bounds write in the IPv6 subsystem for Intel(R) AMT and Intel(R) ISM. This may allow an unauthenticated user to potentially enable escalation of privileges via network access. The vulnerability can be exploited by a remote attacker to elevate their privileges.
Recommendations: For Intel(R) AMT and Intel(R) ISM versions before 11.8.80, update to version 11.8.80 or later. For Intel(R) AMT and Intel(R) ISM versions before 11.12.80, update to version 11.12.80 or later. For Intel(R) AMT and Intel(R) ISM versions before 11.22.80, update to version 11.22.80 or later. For Intel(R) AMT and Intel(R) ISM versions before 12.0.70, update to version 12.0.70 or later. For Intel(R) AMT and Intel(R) ISM versions before 14.0.45, update to version 14.0.45 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2020-05419
CVE-2020-8752

Affected Products

Intel Amt
Intel Ism