CVE-2020-8674

Published: Jun 15, 2020Modified: Nov 21, 2024

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Out-of-bounds read in DHCPv6 subsystem in Intel(R) AMT and Intel(R)ISM versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64 and 14.0.33 may allow an unauthenticated user to potentially enable information disclosure via network access.

Affected (10)

Products: Intel: Active Management Technology Firmware, Service Manager

Intel

2 products

Active Management Technology Firmware

Service Manager

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Intel Active Management Technology Firmware	From 11.0 to 11.8.77
Intel Active Management Technology Firmware	From 11.10 to 11.12.77
Intel Active Management Technology Firmware	From 11.20 to 11.22.77
Intel Active Management Technology Firmware	From 12.0 to 12.0.64
Intel Active Management Technology Firmware	From 14.0 to 14.0.33

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Intel Service Manager	From 11.0 to 11.8.77
Intel Service Manager	From 11.10 to 11.12.77
Intel Service Manager	From 11.20 to 11.22.77
Intel Service Manager	From 12.0 to 12.0.64
Intel Service Manager	From 14.0 to 14.0.33