CVE-2020-0594 : Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions b

Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Published 2020-06-15 14:15:11

Updated 2021-03-18 13:15:19

Source Intel Corporation

View at NVD, CVE.org

Products affected by CVE-2020-0594

Intel » Active Management Technology Firmware
Versions from including (>=) 12.0 and before (<) 12.0.64
cpe:2.3:o:intel:active_management_technology_firmware:*:*:*:*:*:*:*:*
Matching versions
Intel » Active Management Technology Firmware
Versions from including (>=) 11.10 and before (<) 11.12.77
cpe:2.3:o:intel:active_management_technology_firmware:*:*:*:*:*:*:*:*
Matching versions
Intel » Active Management Technology Firmware
Versions from including (>=) 11.0 and before (<) 11.8.77
cpe:2.3:o:intel:active_management_technology_firmware:*:*:*:*:*:*:*:*
Matching versions
Intel » Active Management Technology Firmware
Versions from including (>=) 11.20 and before (<) 11.22.77
cpe:2.3:o:intel:active_management_technology_firmware:*:*:*:*:*:*:*:*
Matching versions
Intel » Service Manager
Versions from including (>=) 11.20 and before (<) 11.22.77
cpe:2.3:a:intel:service_manager:*:*:*:*:*:*:*:*
Matching versions
Intel » Service Manager
Versions from including (>=) 12.0 and before (<) 12.0.64
cpe:2.3:a:intel:service_manager:*:*:*:*:*:*:*:*
Matching versions
Intel » Service Manager
Versions from including (>=) 11.10 and before (<) 11.12.77
cpe:2.3:a:intel:service_manager:*:*:*:*:*:*:*:*
Matching versions
Intel » Service Manager
Versions from including (>=) 11.0 and before (<) 11.8.77
cpe:2.3:a:intel:service_manager:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2020-0594

EPSS FAQ

1.11%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 85 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-0594

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2020-0594

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-0594

https://www.kb.cert.org/vuls/id/257161

VU#257161 - Treck IP stacks contain multiple vulnerabilities

CVEs referencing this url
https://www.synology.com/security/advisory/Synology_SA_20_15

Synology Inc.
Third Party Advisory

CVEs referencing this url
https://security.netapp.com/advisory/ntap-20200611-0007/

Intel SA-00295 AMT Vulnerabilities in NetApp Products | NetApp Product Security

CVEs referencing this url
https://support.lenovo.com/de/en/product_security/len-30041

Intel CSME, SPS, TXE, AMT and DAL Advisory - DE

CVEs referencing this url
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html

INTEL-SA-00295
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2020-0594

Products affected by CVE-2020-0594

Exploit prediction scoring system (EPSS) score for CVE-2020-0594

CVSS scores for CVE-2020-0594

CWE ids for CVE-2020-0594

References for CVE-2020-0594