CVE-2020-0537 — Improper Input Validation in Intel Active Management Technology Firmware

CWE-20 — Improper Input Validation3 documents3 sources
Severity
4.9MEDIUMNVD
EPSS
0.4%
top 37.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Intel Active Management Technology Firmware
Timeline
PublishedJun 15
Latest updateMay 24

Description

Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow a privileged user to potentially enable denial of service via network access.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HExploitability: 1.2 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-h4w9-4qmj-g8r6: Improper input validation in subsystem for Intel(R) AMT versions before 11↗2022-05-24
▶
CVEList
CVE-2020-0537: Improper input validation in subsystem for Intel(R) AMT versions before 11↗2020-06-15
▶
CVE-2020-0537 — Improper Input Validation in Intel | cvebase