CVE-2020-8752

published 2020-11-12

CVE-2020-8752: Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
intel	active_management_technology_firmware	< 11.8.80	11.8.80
intel	active_management_technology_firmware	>= 11.12.0 < 11.12.80	11.12.80
intel	active_management_technology_firmware	>= 11.22.0 < 11.22.80	11.22.80
intel	active_management_technology_firmware	>= 12.0 < 12.0.70	12.0.70
intel	active_management_technology_firmware	>= 14.0 < 14.0.45	14.0.45
intel	standard_manageability	< 11.8.80	11.8.80
intel	standard_manageability	>= 11.12.0 < 11.12.80	11.12.80
intel	standard_manageability	>= 11.22.0 < 11.22.80	11.22.80
intel	standard_manageability	>= 12.0 < 12.0.70	12.0.70
intel	standard_manageability	>= 14.0 < 14.0.45	14.0.45

CWE-787