CVE-2020-8753

{"containers": {"cna": {"affected": [{"product": "Intel(R) AMT, Intel(R) ISM versions", "vendor": "n/a", "versions": [{"status": "affected", "version": "versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45"}]}], "descriptions": [{"lang": "en", "value": "Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access."}], "problemTypes": [{"descriptions": [{"description": "information disclosure", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-11-13T09:06:20.000Z", "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "shortName": "intel"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://security.netapp.com/advisory/ntap-20201113-0003/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secure@intel.com", "ID": "CVE-2020-8753", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Intel(R) AMT, Intel(R) ISM versions", "version": {"version_data": [{"version_value": "versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "information disclosure"}]}]}, "references": {"reference_data": [{"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391", "refsource": "MISC", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391"}, {"name": "https://security.netapp.com/advisory/ntap-20201113-0003/", "refsource": "CONFIRM", "url": "https://security.netapp.com/advisory/ntap-20201113-0003/"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T10:12:09.616Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://security.netapp.com/advisory/ntap-20201113-0003/"}]}]}, "cveMetadata": {"assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "assignerShortName": "intel", "cveId": "CVE-2020-8753", "datePublished": "2020-11-12T18:05:32.000Z", "dateReserved": "2020-02-06T00:00:00.000Z", "dateUpdated": "2024-08-04T10:12:09.616Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "Intel(R) AMT, Intel(R) ISM versions", "vendor": "n/a", "versions": [{"status": "affected", "version": "versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45"}]}], "source": "secure@intel.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:active_management_technology_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5900416C-C69C-4EBC-8071-26170807E958", "versionEndExcluding": "11.8.80", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:active_management_technology_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "44350ED0-7E98-40C4-B8D1-A5D5653ED8A1", "versionEndExcluding": "11.12.80", "versionStartIncluding": "11.12.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:active_management_technology_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5CFA92E9-5534-47CB-8090-0529CC5F459E", "versionEndExcluding": "11.22.80", "versionStartIncluding": "11.22.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:active_management_technology_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9CF61D17-BFFB-4E6C-B47C-8770D99E6317", "versionEndExcluding": "12.0.70", "versionStartIncluding": "12.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:active_management_technology_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "08415E93-8652-45C3-9AC0-5BE19C39E7E9", "versionEndExcluding": "14.0.45", "versionStartIncluding": "14.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:intel:standard_manageability:*:*:*:*:*:*:*:*", "matchCriteriaId": "1B273234-6A62-430D-AF97-DAE65C7B16EB", "versionEndExcluding": "11.8.80", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:standard_manageability:*:*:*:*:*:*:*:*", "matchCriteriaId": "20684D0C-F699-4315-BB60-AAFA5E12D08A", "versionEndExcluding": "11.12.80", "versionStartIncluding": "11.12.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:standard_manageability:*:*:*:*:*:*:*:*", "matchCriteriaId": "68AA7FEC-EDAB-408D-B9E3-5DECD205186E", "versionEndExcluding": "11.22.80", "versionStartIncluding": "11.22.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:standard_manageability:*:*:*:*:*:*:*:*", "matchCriteriaId": "2C01525A-E5F1-4F2A-B561-11874BAB7EA1", "versionEndExcluding": "12.0.70", "versionStartIncluding": "12.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:standard_manageability:*:*:*:*:*:*:*:*", "matchCriteriaId": "85F881D8-37D0-4391-8F95-71A70A4843B0", "versionEndExcluding": "14.0.45", "versionStartIncluding": "14.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access."}, {"lang": "es", "value": "Una lectura fuera de l\u00edmites en el subsistema DHCP para Intel\u00ae AMT, Intel\u00ae ISM versiones anteriores a 11.8.80, 11.12.80, 11.22.80, 12.0.70 y 14.0.45, puede habilitar a un usuario no autenticado para permitir potencialmente una divulgaci\u00f3n de informaci\u00f3n por medio de un acceso de red"}], "id": "CVE-2020-8753", "lastModified": "2026-06-17T03:26:53.323", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-11-12T18:15:17.830", "references": [{"source": "secure@intel.com", "tags": ["Third Party Advisory"], "url": "https://security.netapp.com/advisory/ntap-20201113-0003/"}, {"source": "secure@intel.com", "tags": ["Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://security.netapp.com/advisory/ntap-20201113-0003/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391"}], "sourceIdentifier": "secure@intel.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}