Sign-up

ID

VAR-202006-0245


CVE

CVE-2020-0531


TITLE

Intel(R) AMT Input verification vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2020-006838

DESCRIPTION

Improper input validation in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an authenticated user to potentially enable information disclosure via network access. Intel(R) AMT There is an input verification vulnerability in.Information may be obtained. Intel Active Management Technology (AMT) is a set of hardware-based computer remote active management technology software developed by Intel Corporation. An attacker could exploit this vulnerability to obtain information. The following products and versions are affected: Intel AMT versions prior to 11.8.77, versions prior to 11.12.77, versions prior to 11.22.77, and versions prior to 12.0.64

Trust: 1.71

sources: NVD: CVE-2020-0531 // JVNDB: JVNDB-2020-006838 // VULHUB: VHN-161965

AFFECTED PRODUCTS

vendor:intelmodel:active management technologyscope:gteversion:11.0

Trust: 1.0

vendor:intelmodel:active management technologyscope:ltversion:11.22.77

Trust: 1.0

vendor:intelmodel:active management technologyscope:gteversion:11.20

Trust: 1.0

vendor:intelmodel:active management technologyscope:ltversion:12.0.64

Trust: 1.0

vendor:intelmodel:active management technologyscope:gteversion:12.0

Trust: 1.0

vendor:intelmodel:active management technologyscope:gteversion:11.10

Trust: 1.0

vendor:intelmodel:active management technologyscope:ltversion:11.12.77

Trust: 1.0

vendor:intelmodel:active management technologyscope:ltversion:11.8.77

Trust: 1.0

vendor:intelmodel:active management technologyscope:eqversion:11.12.77

Trust: 0.8

vendor:intelmodel:active management technologyscope:eqversion:11.22.77

Trust: 0.8

vendor:intelmodel:active management technologyscope:eqversion:11.8.77

Trust: 0.8

vendor:intelmodel:active management technologyscope:eqversion:12.0.64

Trust: 0.8

sources: JVNDB: JVNDB-2020-006838 // NVD: CVE-2020-0531

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2020-0531
value: MEDIUM

Trust: 1.0

NVD: JVNDB-2020-006838
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-202006-709
value: MEDIUM

Trust: 0.6

VULHUB: VHN-161965
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2020-0531
severity: MEDIUM
baseScore: 4.0
vectorString: AV:N/AC:L/AU:S/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 8.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

NVD: JVNDB-2020-006838
severity: MEDIUM
baseScore: 4.0
vectorString: AV:N/AC:L/AU:S/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

VULHUB: VHN-161965
severity: MEDIUM
baseScore: 4.0
vectorString: AV:N/AC:L/AU:S/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 8.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2020-0531
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 2.8
impactScore: 3.6
version: 3.1

Trust: 1.0

NVD: JVNDB-2020-006838
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-161965 // JVNDB: JVNDB-2020-006838 // CNNVD: CNNVD-202006-709 // NVD: CVE-2020-0531

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.9

sources: VULHUB: VHN-161965 // JVNDB: JVNDB-2020-006838 // NVD: CVE-2020-0531

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202006-709

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202006-709

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2020-006838

PATCH
title:INTEL-SA-00295url:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
Trust: 0.8
title:Intel AMT Enter the fix for the verification error vulnerabilityurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=122452
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2020-006838 // 
            
            
            
            CNNVD: CNNVD-202006-709

EXTERNAL IDS
db:NVDid:CVE-2020-0531
Trust: 2.5
db:LENOVOid:LEN-30041
Trust: 1.7
db:JVNid:JVNVU98979613
Trust: 0.8
db:JVNDBid:JVNDB-2020-006838
Trust: 0.8
db:CNNVDid:CNNVD-202006-709
Trust: 0.7
db:AUSCERTid:ESB-2020.1991.2
Trust: 0.6
db:AUSCERTid:ESB-2020.1991
Trust: 0.6
db:CNVDid:CNVD-2020-35708
Trust: 0.1
db:VULHUBid:VHN-161965
Trust: 0.1
sources:
            
            
            VULHUB: VHN-161965 // 
            
            
            
            JVNDB: JVNDB-2020-006838 // 
            
            
            
            CNNVD: CNNVD-202006-709 // 
            
            
            
            NVD: CVE-2020-0531

REFERENCES
url:https://security.netapp.com/advisory/ntap-20200611-0007/
Trust: 1.7
url:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
Trust: 1.7
url:https://support.lenovo.com/de/en/product_security/len-30041
Trust: 1.7
url:https://nvd.nist.gov/vuln/detail/cve-2020-0531
Trust: 1.4
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-0531
Trust: 0.8
url:https://jvn.jp/vu/jvnvu98979613/
Trust: 0.8
url:https://www.auscert.org.au/bulletins/esb-2020.1991/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.1991.2/
Trust: 0.6
url:https://vigilance.fr/vulnerability/intel-csme-sps-txe-amt-ism-dal-multiple-vulnerabilities-32545
Trust: 0.6
url:https://support.lenovo.com/us/en/product_security/len-30041
Trust: 0.6
sources:
            
            
            VULHUB: VHN-161965 // 
            
            
            
            JVNDB: JVNDB-2020-006838 // 
            
            
            
            CNNVD: CNNVD-202006-709 // 
            
            
            
            NVD: CVE-2020-0531

SOURCES
db:VULHUBid:VHN-161965
db:JVNDBid:JVNDB-2020-006838
db:CNNVDid:CNNVD-202006-709
db:NVDid:CVE-2020-0531

LAST UPDATE DATE
2024-11-23T21:30:30.241000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-161965date:2020-07-22T00:00:00
db:JVNDBid:JVNDB-2020-006838date:2020-07-20T00:00:00
db:CNNVDid:CNNVD-202006-709date:2021-05-24T00:00:00
db:NVDid:CVE-2020-0531date:2024-11-21T04:53:41.047

SOURCES RELEASE DATE
db:VULHUBid:VHN-161965date:2020-06-15T00:00:00
db:JVNDBid:JVNDB-2020-006838date:2020-07-20T00:00:00
db:CNNVDid:CNNVD-202006-709date:2020-06-09T00:00:00
db:NVDid:CVE-2020-0531date:2020-06-15T14:15:10.113