PT-2020-6023 · Intel · Intel Adas Ie

Published 2020-11-10 · Updated 2020-11-30 · CVE-2020-12323

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel ADAS IE versions prior to ADAS IE 1.0.766

Description The issue is caused by insufficient input validation, which may allow a privileged user to potentially enable escalation of privilege via local access.

Recommendations For versions prior to ADAS IE 1.0.766, update to version ADAS IE 1.0.766 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2021-02675

CVE-2020-12323

Affected Products

Intel Adas Ie

References · 6

• https://bdu.fstec.ru/vul/2021-02675 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00415 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12323 · Security Note
• https://osv.dev/vulnerability/CVE-2020-12323 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00415.html · Note
• https://t.me/cibsecurity/16254 · Telegram Post