CVE-2020-8758

Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an unauthenticated user to potentially enable escalation of privilege via network access. On un-provisioned systems, an authenticated user may potentially enable escalation of privilege via local access.

Published: Sep 10, 2020
Updated: Apr 14, 2023
CVE: CVE-2020-8758
Severity: Critical
Exploit:

CVSS v3:

Severity: Critical
Score: 9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
intel / standard_manageability	14.0	14.0.39
intel / standard_manageability	12.0	12.0.68
intel / standard_manageability	11.22	11.22.79
intel / standard_manageability	11.12	11.12.79
intel / standard_manageability	11.8	11.8.79
intel / active_management_technology_firmware	14.0	14.0.39
intel / active_management_technology_firmware	12.0	12.0.68
intel / active_management_technology_firmware	11.22	11.22.79
intel / active_management_technology_firmware	11.12	11.12.79
intel / active_management_technology_firmware	11.8	11.8.79

Vulnerability Database

289,599

CVE-2020-8758