CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2020-8752

CVSS 9.8v3.1pub. 2020-11-12upd. 2024-11-21

Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Intel Active Management Technology Firmware

    OS
    Intel
    < 11.8.8011.12.0 – 11.12.80 (excl.)11.22.0 – 11.22.80 (excl.)12.0 – 12.0.70 (excl.)14.0 – 14.0.45 (excl.)

  • Intel Standard Manageability

    APP
    Intel
    14.0 – 14.0.45 (excl.)< 11.8.8011.12.0 – 11.12.80 (excl.)11.22.0 – 11.22.80 (excl.)12.0 – 12.0.70 (excl.)

  • Netapp Cloud Backup

    APP
    Netapp
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2021-42013CRITICAL9.8⚠ KEVPL ✓same product

Apache HTTP Server 2.4.50 — path traversal i RCE (niewystarczający patch CVE-2021-41773)

CVE-2021-41773CRITICAL9.8⚠ KEVPL ✓same product

Apache HTTP Server 2.4.49 — path traversal i RCE (aktywnie exploitowany)

CVE-2021-40438CRITICAL9.0⚠ KEVPL ✓same product

SSRF w mod_proxy Apache HTTP Server — przekierowanie żądań przez atakującego

CVE-2017-5689CRITICAL9.8⚠ KEVPL ✓same product

Privilege Escalation w Intel AMT/ISM/SBT — nieautoryzowany dostęp systemowy

CVE-2022-30601CRITICAL9.8PL ✓same product

Niewystarczająco chronione dane uwierzytelniające w Intel AMT i Intel Standard Manageability