CVEvulnerability
CVE-2020-8674
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-06-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-125
Description
Out-of-bounds read in DHCPv6 subsystem in Intel(R) AMT and Intel(R)ISM versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64 and 14.0.33 may allow an unauthenticated user to potentially enable information disclosure via network access.
Affected configurations
• intel active management technology firmware (>= 11.0 < 11.8.77)
• intel active management technology firmware (>= 11.10 < 11.12.77)
• intel active management technology firmware (>= 11.20 < 11.22.77)
• intel active management technology firmware (>= 12.0 < 12.0.64)
• intel active management technology firmware (>= 14.0 < 14.0.33)
• intel service manager (>= 11.0 < 11.8.77)
• intel service manager (>= 11.10 < 11.12.77)
• intel service manager (>= 11.20 < 11.22.77)
• intel service manager (>= 12.0 < 12.0.64)
• intel service manager (>= 14.0 < 14.0.33)
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- https://security.netapp.com/advisory/ntap-20200611-0007/ security.netapp.com
- https://support.lenovo.com/de/en/product_security/len-30041 support.lenovo.com
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html Vendor Advisory
- https://www.kb.cert.org/vuls/id/257161 www.kb.cert.org
- https://www.synology.com/security/advisory/Synology_SA_20_15 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20200611-0007/ security.netapp.com
- https://support.lenovo.com/de/en/product_security/len-30041 support.lenovo.com
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html Vendor Advisory
- https://www.kb.cert.org/vuls/id/257161 www.kb.cert.org
- https://www.synology.com/security/advisory/Synology_SA_20_15 Third Party Advisory