CVEvulnerability
CVE-2020-0595
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2020-06-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-416
Description
Use after free in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
Affected configurations
• intel active management technology firmware (>= 11.0 < 11.8.77)
• intel active management technology firmware (>= 11.10 < 11.12.77)
• intel active management technology firmware (>= 11.20 < 11.22.77)
• intel active management technology firmware (>= 12.0 < 12.0.64)
• intel service manager (>= 11.0 < 11.8.77)
• intel service manager (>= 11.10 < 11.12.77)
• intel service manager (>= 11.20 < 11.22.77)
• intel service manager (>= 12.0 < 12.0.64)
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://security.netapp.com/advisory/ntap-20200611-0007/ security.netapp.com
- https://support.lenovo.com/de/en/product_security/len-30041 support.lenovo.com
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html Vendor Advisory
- https://www.kb.cert.org/vuls/id/257161 www.kb.cert.org
- https://www.synology.com/security/advisory/Synology_SA_20_15 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20200611-0007/ security.netapp.com
- https://support.lenovo.com/de/en/product_security/len-30041 support.lenovo.com
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html Vendor Advisory
- https://www.kb.cert.org/vuls/id/257161 www.kb.cert.org
- https://www.synology.com/security/advisory/Synology_SA_20_15 Third Party Advisory