CVE-2020-12338

EPSS 1.81%
Published 13.11.2020 20:15:16
Last modified 21.11.2024 04:59:32
Source secure@intel.com
Teams watchlist Login
Open Login

Insufficient control flow management in the Open WebRTC Toolkit before version 4.3.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Affected products Warnungen 0 Metrics 3 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Intel ≫ Open Webrtc Toolkit Version < 4.3.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.81%	0.811

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00424

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-12338

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-12338

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-12338

EUVD