VDB
CVE-2020-0594
CVE-2020-0594
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
EPSS 2.78% · 86.3th percentile
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
2.78%
86.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| intel | service_manager | 12.0, 11.0, 11.10 |
| intel | active_management_technology_firmware | 12.0, 11.0, 11.10 |
| n/a | Intel(R) AMT and Intel(R) ISM | See provided reference |
Exploit Intelligence
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html (circl)
- https://security.netapp.com/advisory/ntap-20200611-0007/ (circl)
- VU#257161 (circl)
- https://www.synology.com/security/advisory/Synology_SA_20_15 (circl)
- https://support.lenovo.com/de/en/product_security/len-30041 (circl)
Timeline
- Jun 9, 2020 CVE Published
- Apr 14, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 17, 2025 EPSS Score
- Mar 23, 2025 EPSS Score
- Mar 24, 2025 EPSS Score
- Mar 29, 2025 EPSS Score
- Apr 9, 2025 EPSS Score
- Apr 10, 2025 EPSS Score
- Apr 16, 2025 EPSS Score
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00366.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00322.html advisory
- https://software.intel.com/security-software-guidance/processors-affected-transient-execution-attack-mitigation-product-cpu-model advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00320.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00266.html advisory
- https://security.netapp.com/advisory/ntap-20200611-0007/ url
- VU#257161 third-party-advisory
- https://www.synology.com/security/advisory/Synology_SA_20_15 url
- https://support.lenovo.com/de/en/product_security/len-30041 url
- https://nvd.nist.gov/vuln/detail/CVE-2020-0594 advisory
- https://security.netapp.com/advisory/ntap-20200611-0007 url