9.8

CVE-2020-0594

Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Data is provided by the National Vulnerability Database (NVD)
IntelActive Management Technology Firmware Version >= 11.0 < 11.8.77
IntelActive Management Technology Firmware Version >= 11.10 < 11.12.77
IntelActive Management Technology Firmware Version >= 11.20 < 11.22.77
IntelActive Management Technology Firmware Version >= 12.0 < 12.0.64
IntelService Manager Version >= 11.0 < 11.8.77
IntelService Manager Version >= 11.10 < 11.12.77
IntelService Manager Version >= 11.20 < 11.22.77
IntelService Manager Version >= 12.0 < 12.0.64
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 2.78% 0.855
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.