7.5

CVE-2020-0597

Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthenticated user to potentially enable denial of service via network access.

Data is provided by the National Vulnerability Database (NVD)
Intel ≫ Software Manager Version >= 11.0 <= 11.8.76
Intel ≫ Software Manager Version >= 11.10 <= 11.11.76
Intel ≫ Software Manager Version >= 11.20 <= 11.22.76
Intel ≫ Software Manager Version >= 12.0 <= 12.0.63
Intel ≫ Software Manager Version >= 13.0 <= 13.0.31
Intel ≫ Software Manager Version >= 14.0 <= 14.0.32
Intel ≫ Active Management Technology Firmware Version >= 11.0 <= 11.8.76
Intel ≫ Active Management Technology Firmware Version >= 11.10 <= 11.11.76
Intel ≫ Active Management Technology Firmware Version >= 11.20 <= 11.22.76
Intel ≫ Active Management Technology Firmware Version >= 12.0 <= 12.0.63
Intel ≫ Active Management Technology Firmware Version >= 13.0 <= 13.0.31
Intel ≫ Active Management Technology Firmware Version >= 14.0 <= 14.0.32
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 2.73% 0.854
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://www.kb.cert.org/vuls/id/257161
Third Party Advisory
US Government Resource