CVE-2020-8752
First published: Thu Nov 12 2020(Updated: )
Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel Active Management Technology Firmware | <11.8.80 | |
| Intel Active Management Technology Firmware | >=11.12.0<11.12.80 | |
| Intel Active Management Technology Firmware | >=11.22.0<11.22.80 | |
| Intel Active Management Technology Firmware | >=12.0<12.0.70 | |
| Intel Active Management Technology Firmware | >=14.0<14.0.45 | |
| Netapp Cloud Backup | ||
| Intel Standard Manageability | <11.8.80 | |
| Intel Standard Manageability | >=11.12.0<11.12.80 | |
| Intel Standard Manageability | >=11.22.0<11.22.80 | |
| Intel Standard Manageability | >=12.0<12.0.70 | |
| Intel Standard Manageability | >=14.0<14.0.45 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-8752?
CVE-2020-8752 is a vulnerability in the IPv6 subsystem for Intel AMT and ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 which may allow an unauthenticated user to potentially enable escalation of privileges via network access.
How severe is CVE-2020-8752?
CVE-2020-8752 has a severity level of 9.8 out of 10, making it critical.
Which software versions are affected by CVE-2020-8752?
The versions of Intel AMT and ISM firmware affected are: 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45.
How can an unauthenticated user exploit CVE-2020-8752?
An unauthenticated user can potentially exploit CVE-2020-8752 by leveraging network access to enable escalation of privileges.
Where can I find more information about CVE-2020-8752?
You can find more information about CVE-2020-8752 in the following references: [Security NetApp Advisory](https://security.netapp.com/advisory/ntap-20201113-0003/) and [Intel Security Advisory](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391).
- collector/nvd-index
- agent/references
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/severity
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/intel
- canonical/intel active management technology firmware
- version/intel active management technology firmware/11.12.0
- version/intel active management technology firmware/11.22.0
- version/intel active management technology firmware/12.0
- version/intel active management technology firmware/14.0
- vendor/netapp
- canonical/netapp cloud backup
- canonical/intel standard manageability
- version/intel standard manageability/11.12.0
- version/intel standard manageability/11.22.0
- version/intel standard manageability/12.0
- version/intel standard manageability/14.0