CVE-2020-0535: Input Validation
First published: Mon Jun 15 2020(Updated: )
Improper input validation in Intel(R) AMT versions before 11.8.76, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel Active Management Technology Firmware | >=11.0<11.8.77 | |
| Intel Active Management Technology Firmware | >=11.10<11.12.77 | |
| Intel Active Management Technology Firmware | >=11.20<11.22.77 | |
| Intel Active Management Technology Firmware | >=12.0<12.0.64 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-0535?
The severity of CVE-2020-0535 is medium, with a severity value of 5.3.
What is the vulnerability in Intel AMT versions before 11.8.76, 11.12.77, 11.22.77, and 12.0.64?
The vulnerability in Intel AMT versions before 11.8.76, 11.12.77, 11.22.77, and 12.0.64 is improper input validation, which may allow an unauthenticated user to potentially enable information disclosure via network access.
How can an unauthenticated user potentially enable information disclosure via network access in Intel AMT versions affected by CVE-2020-0535?
An unauthenticated user can potentially enable information disclosure via network access in Intel AMT versions affected by CVE-2020-0535 due to improper input validation.
Which software versions of Intel AMT are affected by CVE-2020-0535?
The following software versions of Intel AMT are affected by CVE-2020-0535: 11.8.76, 11.12.77, 11.22.77, and 12.0.64.
Is there a fix available for CVE-2020-0535?
Yes, fixes for CVE-2020-0535 are available. Please refer to the references for more information.
- collector/nvd-index
- agent/weakness
- agent/event
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/intel
- canonical/intel active management technology firmware
- version/intel active management technology firmware/11.0
- version/intel active management technology firmware/11.10
- version/intel active management technology firmware/11.20
- version/intel active management technology firmware/12.0