VDB

CVE-2020-8746

CVE-2020-8746 PUBLISHED

Reported by intel · Published November 12, 2020

Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
active_management_technology_firmwareintel14.0.45, 12.0.70, 11.22.80, 11.12.80, 11.8.80

Affected products

VendorProductVersions
n/aIntel(R) AMTversions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45
n/aIntel(R) AMTversions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45

Timeline

  • Nov 12, 2020 CVE Published
  • Apr 14, 2021 EPSS Score (30 in total, the first dated here)
  • Apr 4, 2026 Security Advisory
  • Aug 28, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2020-8746
vulnetix vdb fixes CVE-2020-8746

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2020-8746/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

  • x_refsource_MISC
  • x_refsource_CONFIRM
Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›