Vulnerabilities > CVE-2020-8754 - Out-of-bounds Read vulnerability in multiple products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

intel

netapp

CWE-125

NVD

Published: 2020-11-12

Updated: 2024-11-21

Summary

Out-of-bounds read in subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.

Vulnerable Configurations

Part	Description	Count
OS	Intel Intel Active Management Technology Firmware - Intel Active Management Technology Firmware 1.0 Intel Active Management Technology Firmware 2.0 Intel Active Management Technology Firmware 2.1 Intel Active Management Technology Firmware 2.2 Intel Active Management Technology Firmware 2.5 Intel Active Management Technology Firmware 2.6 Intel Active Management Technology Firmware 3.0 Intel Active Management Technology Firmware 3.1 Intel Active Management Technology Firmware 3.2 Intel Active Management Technology Firmware 4.0 Intel Active Management Technology Firmware 4.1 Intel Active Management Technology Firmware 5.0 Intel Active Management Technology Firmware 6.0 Intel Active Management Technology Firmware 6.1 Intel Active Management Technology Firmware 6.2 Intel Active Management Technology Firmware 7.0 Intel Active Management Technology Firmware 7.1 Intel Active Management Technology Firmware 8.0 Intel Active Management Technology Firmware 8.1 Intel Active Management Technology Firmware 9.0 Intel Active Management Technology Firmware 9.1 Intel Active Management Technology Firmware 9.5 Intel Active Management Technology Firmware 10.0 Intel Active Management Technology Firmware 11.0 Intel Active Management Technology Firmware 11.0.25.3001 Intel Active Management Technology Firmware 11.0.26.3000 Intel Active Management Technology Firmware 11.2 Intel Active Management Technology Firmware 11.5 Intel Active Management Technology Firmware 11.6 Intel Active Management Technology Firmware 11.7 Intel Active Management Technology Firmware 11.8 Intel Active Management Technology Firmware 11.8.50.3420 Intel Active Management Technology Firmware 11.8.60 Intel Active Management Technology Firmware 11.8.65 Intel Active Management Technology Firmware 11.8.70 Intel Active Management Technology Firmware 11.8.76 Intel Active Management Technology Firmware 11.8.77 Intel Active Management Technology Firmware 11.8.79 Intel Active Management Technology Firmware 11.12.0 Intel Active Management Technology Firmware 11.12.77 Intel Active Management Technology Firmware 11.12.79 Intel Active Management Technology Firmware 11.22.0 Intel Active Management Technology Firmware 11.22.60 Intel Active Management Technology Firmware 11.22.65 Intel Active Management Technology Firmware 11.22.70 Intel Active Management Technology Firmware 11.22.76 Intel Active Management Technology Firmware 11.22.77 Intel Active Management Technology Firmware 11.22.79 Intel Active Management Technology Firmware 12.0 Intel Active Management Technology Firmware 12.0.0 Intel Active Management Technology Firmware 12.0.5 Intel Active Management Technology Firmware 12.0.20 Intel Active Management Technology Firmware 12.0.35 Intel Active Management Technology Firmware 12.0.45 Intel Active Management Technology Firmware 12.0.63 Intel Active Management Technology Firmware 12.0.64 Intel Active Management Technology Firmware 12.0.68 Intel Active Management Technology Firmware 14.0 Intel Active Management Technology Firmware 14.0.0 Intel Active Management Technology Firmware 14.0.10 Intel Active Management Technology Firmware 14.0.32 Intel Active Management Technology Firmware 14.0.33 Intel Active Management Technology Firmware 14.0.39	64
Application	Netapp Netapp Cloud Backup -	1
Application	Intel Intel Standard Manageability 11.8 Intel Standard Manageability 11.8.79 Intel Standard Manageability 11.12.0 Intel Standard Manageability 11.12.79 Intel Standard Manageability 11.22.0 Intel Standard Manageability 11.22.79 Intel Standard Manageability 12.0 Intel Standard Manageability 12.0.68 Intel Standard Manageability 14.0 Intel Standard Manageability 14.0.39	10

Common Weakness Enumeration (CWE)

CWE-125 - Out-of-bounds Read

Common Attack Pattern Enumeration and Classification (CAPEC)

Overread Buffers
An adversary attacks a target by providing input that causes an application to read beyond the boundary of a defined buffer. This typically occurs when a value influencing where to start or stop reading is set to reflect positions outside of the valid memory location of the buffer. This type of attack may result in exposure of sensitive information, a system crash, or arbitrary code execution.

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

References