CVE-2020-24515 : Protection mechanism failure in some Intel(R) RealSense(TM) IDs may allow an una

Protection mechanism failure in some Intel(R) RealSense(TM) IDs may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Published 2021-06-09 19:15:09

Updated 2022-05-03 16:04:40

Source Intel Corporation

View at NVD, CVE.org

Products affected by CVE-2020-24515

Intel » Realsense Id F450 Firmware » Version: N/A
cpe:2.3:o:intel:realsense_id_f450_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Realsense Id F450 » Version: N/A
Intel » Realsense Id F455 Firmware » Version: N/A
cpe:2.3:o:intel:realsense_id_f455_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Realsense Id F455 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2020-24515

EPSS FAQ

0.07%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 28 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-24515

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
6.8	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	0.9	5.9	NIST
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2020-24515

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00460.html

INTEL-SA-00460
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2020-24515

Products affected by CVE-2020-24515

Exploit prediction scoring system (EPSS) score for CVE-2020-24515

CVSS scores for CVE-2020-24515

References for CVE-2020-24515