CVE-2020-8758 - Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an unauthenticated user to potentially enable escalation of privilege via network access

Back Back to CVE browser

CRITICAL

Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an unauthenticated user to potentially enable escalation of privilege via network access

Published Sep 10, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 1.89%

Description

Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an unauthenticated user to potentially enable escalation of privilege via network access. On un-provisioned systems, an authenticated user may potentially enable escalation of privilege via local access.

Affected products

Vendor n/a Product Intel(R) AMT and Intel(R) ISM Default
unknown
Affected
- Before versions 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Intel(R) AMT and Intel(R) ISM	unknown	Affected Before versions 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29606
Advisory
https://security.netapp.com/advisory/ntap-20200911-0005/
x_refsource_CONFIRMThird Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00404.html
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29606		Advisory
https://security.netapp.com/advisory/ntap-20200911-0005/		x_refsource_CONFIRMThird Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00404.html		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner intel

Published Sep 10, 2020

Updated Aug 4, 2024

Reserved Feb 6, 2020

Link CVE-2020-8758

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-8758

Red Hat

No data

ENISA EUVD

Assigner intel

Published Sep 10, 2020

Updated Aug 4, 2024

Link EUVD-2020-29606

GitHub

No data