CVE-2020-0596

Improper input validation in DHCPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access.

Published: Jun 15, 2020
Updated: Apr 13, 2023
CVE: CVE-2020-0596
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

CWE-20

Affected Software
References

Software	From	Fixed in
intel / active_management_technology_firmware	11.0	11.8.77
intel / active_management_technology_firmware	11.10	11.12.77
intel / active_management_technology_firmware	11.20	11.22.77
intel / active_management_technology_firmware	12.0	12.0.64
intel / service_manager	12.0	12.0.64
intel / service_manager	11.20	11.22.77
intel / service_manager	11.10	11.12.77
intel / service_manager	11.0	11.8.77

https://security.netapp.com/advisory/ntap-20200611-0007/
https://support.lenovo.com/de/en/product_security/len-30041
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
https://www.synology.com/security/advisory/Synology_SA_20_15

Vulnerability Database

289,599

CVE-2020-0596