CVE-2020-0597

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthenticated user to potentially enable denial of service via network access.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-125

Affected Products (12)

intel · software_managervulnerable

intel · active_management_technology_firmwarevulnerable

References (12)

https://security.netapp.com/advisory/ntap-20200611-0007/

Third Party Advisory

https://support.lenovo.com/de/en/product_security/len-30041

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html

Vendor Advisory

https://www.kb.cert.org/vuls/id/257161

Third Party AdvisoryUS Government Resource

https://www.synology.com/security/advisory/Synology_SA_20_15

Third Party Advisory