Vulnerabilities > CVE-2020-8752 - Out-of-bounds Write vulnerability in multiple products

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

intel

netapp

CWE-787

critical

NVD

Published: 2020-11-12

Updated: 2023-05-22

Summary

Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access.

Vulnerable Configurations

Part	Description	Count
OS	Intel Intel Active Management Technology Firmware - Intel Active Management Technology Firmware 1.0 Intel Active Management Technology Firmware 2.0 Intel Active Management Technology Firmware 2.1 Intel Active Management Technology Firmware 2.2 Intel Active Management Technology Firmware 2.5 Intel Active Management Technology Firmware 2.6 Intel Active Management Technology Firmware 3.0 Intel Active Management Technology Firmware 3.1 Intel Active Management Technology Firmware 3.2 Intel Active Management Technology Firmware 4.0 Intel Active Management Technology Firmware 4.1 Intel Active Management Technology Firmware 5.0 Intel Active Management Technology Firmware 6.0 Intel Active Management Technology Firmware 6.1 Intel Active Management Technology Firmware 6.2 Intel Active Management Technology Firmware 7.0 Intel Active Management Technology Firmware 7.1 Intel Active Management Technology Firmware 8.0 Intel Active Management Technology Firmware 8.1 Intel Active Management Technology Firmware 9.0 Intel Active Management Technology Firmware 9.1 Intel Active Management Technology Firmware 9.5 Intel Active Management Technology Firmware 10.0 Intel Active Management Technology Firmware 11.0 Intel Active Management Technology Firmware 11.2 Intel Active Management Technology Firmware 11.5 Intel Active Management Technology Firmware 11.6 Intel Active Management Technology Firmware 11.7 Intel Active Management Technology Firmware 11.8 Intel Active Management Technology Firmware 11.8.50.3420 Intel Active Management Technology Firmware 11.8.60 Intel Active Management Technology Firmware 11.8.65 Intel Active Management Technology Firmware 11.8.70 Intel Active Management Technology Firmware 11.8.76 Intel Active Management Technology Firmware 11.8.77 Intel Active Management Technology Firmware 11.8.79 Intel Active Management Technology Firmware 11.12.0 Intel Active Management Technology Firmware 11.12.77 Intel Active Management Technology Firmware 11.12.79 Intel Active Management Technology Firmware 11.22.0 Intel Active Management Technology Firmware 11.22.60 Intel Active Management Technology Firmware 11.22.65 Intel Active Management Technology Firmware 11.22.70 Intel Active Management Technology Firmware 11.22.76 Intel Active Management Technology Firmware 11.22.77 Intel Active Management Technology Firmware 11.22.79 Intel Active Management Technology Firmware 12.0 Intel Active Management Technology Firmware 12.0.0 Intel Active Management Technology Firmware 12.0.5 Intel Active Management Technology Firmware 12.0.20 Intel Active Management Technology Firmware 12.0.35 Intel Active Management Technology Firmware 12.0.45 Intel Active Management Technology Firmware 12.0.63 Intel Active Management Technology Firmware 12.0.64 Intel Active Management Technology Firmware 12.0.68 Intel Active Management Technology Firmware 14.0 Intel Active Management Technology Firmware 14.0.0 Intel Active Management Technology Firmware 14.0.10 Intel Active Management Technology Firmware 14.0.32 Intel Active Management Technology Firmware 14.0.33 Intel Active Management Technology Firmware 14.0.39	62
Application	Netapp Netapp Cloud Backup -	1
Application	Intel Intel Standard Manageability 11.8 Intel Standard Manageability 11.8.79 Intel Standard Manageability 11.12.0 Intel Standard Manageability 11.12.79 Intel Standard Manageability 11.22.0 Intel Standard Manageability 11.22.79 Intel Standard Manageability 12.0 Intel Standard Manageability 12.0.68 Intel Standard Manageability 14.0 Intel Standard Manageability 14.0.39	10

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References