CVE-2020-8753
First published: Thu Nov 12 2020(Updated: )
Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel Active Management Technology Firmware | <11.8.80 | |
| Intel Active Management Technology Firmware | >=11.12.0<11.12.80 | |
| Intel Active Management Technology Firmware | >=11.22.0<11.22.80 | |
| Intel Active Management Technology Firmware | >=12.0<12.0.70 | |
| Intel Active Management Technology Firmware | >=14.0<14.0.45 | |
| Intel Standard Manageability | <11.8.80 | |
| Intel Standard Manageability | >=11.12.0<11.12.80 | |
| Intel Standard Manageability | >=11.22.0<11.22.80 | |
| Intel Standard Manageability | >=12.0<12.0.70 | |
| Intel Standard Manageability | >=14.0<14.0.45 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-8753?
CVE-2020-8753 has been classified as a high-severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2020-8753?
To remediate CVE-2020-8753, upgrade your Intel AMT or Intel ISM firmware to the latest version specified in the advisory.
Who is affected by CVE-2020-8753?
CVE-2020-8753 affects users of Intel AMT and Intel ISM prior to the specified firmware versions.
What type of vulnerability is CVE-2020-8753?
CVE-2020-8753 is an out-of-bounds read vulnerability that can lead to unauthorized information disclosure.
Can CVE-2020-8753 be exploited remotely?
Yes, CVE-2020-8753 can potentially be exploited by an unauthenticated user via network access.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/softwarecombine
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/intel
- canonical/intel active management technology firmware
- version/intel active management technology firmware/11.12.0
- version/intel active management technology firmware/11.22.0
- version/intel active management technology firmware/12.0
- version/intel active management technology firmware/14.0
- canonical/intel standard manageability
- version/intel standard manageability/11.12.0
- version/intel standard manageability/11.22.0
- version/intel standard manageability/12.0
- version/intel standard manageability/14.0