CVE-2020-24513 — Sensitive Information Exposure in Siemens Simatic ET 200sp Open Controller Firmware

CWE-200 — Sensitive Information Exposure7 documents7 sources
Severity
6.5MEDIUMNVD
EPSS
0.0%
top 94.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Siemens Simatic ET 200sp Open Controller FirmwareSiemens Simatic Ipc127e FirmwareDebian Linux
Timeline
PublishedJun 9
Latest updateMay 24

Description

Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:NExploitability: 2.0 | Impact: 4.0

Affected Packages2 packages

Also affects: Debian Linux 10.0, 9.0

🔴Vulnerability Details

3
GHSA
GHSA-7fcj-4hc5-mrph: Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information dis↗2022-05-24
▶
OSV
CVE-2020-24513: Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information dis↗2021-06-09
▶
CVEList
CVE-2020-24513: Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information dis↗2021-06-09
▶

📋Vendor Advisories

3
Ubuntu
Intel Microcode vulnerabilities↗2021-06-09
▶
Red Hat
hw: information disclosure on some Intel Atom processors↗2021-06-08
▶
Debian
CVE-2020-24513: intel-microcode - Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors...↗2020
▶
CVE-2020-24513 — Sensitive Information Exposure | cvebase