CVE-2020-24506

CWE-125 — Out-of-bounds Read3 documents3 sources
Severity
4.4MEDIUM
EPSS
0.2%
top 62.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Intel Converged Security AND Manageability EngineSiemens Simatic Ipc627e FirmwareSiemens Simatic Ipc647e Firmware+2 more
Timeline
PublishedJun 9
Latest updateMay 24

Description

Out of bound read in a subsystem in the Intel(R) CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32 may allow a privileged user to potentially enable information disclosure via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 0.8 | Impact: 3.6

Affected Packages6 packages

▶CVEListV5intel(r)_csme_versionsversions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32

🔴Vulnerability Details

2
GHSA
GHSA-q3wq-vgfp-h826: Out of bound read in a subsystem in the Intel(R) CSME versions before 12↗2022-05-24
▶
CVEList
CVE-2020-24506: Out of bound read in a subsystem in the Intel(R) CSME versions before 12↗2021-06-09
▶
CVE-2020-24506 (MEDIUM CVSS 4.4) | Out of bound read in a subsystem in | cvebase.io