CVEvulnerability
CVE-2020-8752
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2020-11-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-787
Description
Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access.
Affected configurations
• intel active management technology firmware (< 11.8.80)
• intel active management technology firmware (>= 11.12.0 < 11.12.80)
• intel active management technology firmware (>= 11.22.0 < 11.22.80)
• intel active management technology firmware (>= 12.0 < 12.0.70)
• intel active management technology firmware (>= 14.0 < 14.0.45)
• netapp cloud backup
• intel standard manageability (< 11.8.80)
• intel standard manageability (>= 11.12.0 < 11.12.80)
• intel standard manageability (>= 11.22.0 < 11.22.80)
• intel standard manageability (>= 12.0 < 12.0.70)
• intel standard manageability (>= 14.0 < 14.0.45)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://security.netapp.com/advisory/ntap-20201113-0003/ Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 Vendor Advisory
- https://security.netapp.com/advisory/ntap-20201113-0003/ Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 Vendor Advisory