CVE-2020-0595

Use after free in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Published: Jun 15, 2020
Updated: Apr 13, 2023
CVE: CVE-2020-0595
Severity: Critical
Exploit:

CVSS v3:

Severity: Critical
Score: 9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-416

Affected Software
References

Software	From	Fixed in
intel / active_management_technology_firmware	11.0	11.8.77
intel / active_management_technology_firmware	11.10	11.12.77
intel / active_management_technology_firmware	11.20	11.22.77
intel / active_management_technology_firmware	12.0	12.0.64
intel / service_manager	12.0	12.0.64
intel / service_manager	11.20	11.22.77
intel / service_manager	11.10	11.12.77
intel / service_manager	11.0	11.8.77

https://security.netapp.com/advisory/ntap-20200611-0007/
https://support.lenovo.com/de/en/product_security/len-30041
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
https://www.kb.cert.org/vuls/id/257161
https://www.synology.com/security/advisory/Synology_SA_20_15

Vulnerability Database

289,599

CVE-2020-0595