CVE-2020-8758 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Intel Active Management Technology Firmware

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
1.3%
top 20.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Intel Active Management Technology FirmwareIntel Standard Manageability
Timeline
PublishedSep 10
Latest updateMay 24

Description

Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an unauthenticated user to potentially enable escalation of privilege via network access. On un-provisioned systems, an authenticated user may potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶NVDintel/standard_manageability11.8 — 11.8.79+4

🔴Vulnerability Details

2
GHSA
GHSA-p336-q5gx-939v: Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11↗2022-05-24
▶
CVEList
CVE-2020-8758: Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11↗2020-09-10
▶
CVE-2020-8758 — Intel vulnerability | cvebase