deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-12318
Published: 2020-11-12
Description: Protection mechanism failure in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00402; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00402
CVE: CVE-2020-12319
Published: 2020-11-12
Description: Insufficient control flow management in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.5 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00402; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00402
CVE: CVE-2020-12321
Published: 2020-11-12
Description: Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00403; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00403
CVE: CVE-2020-12322
Published: 2020-11-12
Description: Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00403; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00403
CVE: CVE-2020-12354
Published: 2020-11-12
Description: Incorrect default permissions in Windows(R) installer in Intel(R) AMT SDK versions before 14.0.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-12355
Published: 2020-11-12
Description: Authentication bypass by capture-replay in RPMB protocol message authentication subsystem in Intel(R) TXE versions before 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-294
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-12356
Published: 2020-11-12
Description: Out-of-bounds read in subsystem in Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-13770
Published: 2020-11-12
Description: Several services are accessing named pipes in Ivanti Endpoint Manager through 2020.1.1 with default or overly permissive security attributes; as these services run as user ‘NT AUTHORITY\SYSTEM’, the issue can be used to escalate privileges from a local standard or service account having SeImpersonatePrivilege (eg. user ‘NT AUTHORITY\NETWORK SERVICE’).
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://labs.jumpsec.com/advisory-cve-2020-13770-ivanti-uem-named-pipe-token-impersonation/; https://labs.jumpsec.com/advisory-cve-2020-13770-ivanti-uem-named-pipe-token-impersonation/
CVE: CVE-2020-13771
Published: 2020-11-12
Description: Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a (nonexistent) library file, allowing (under certain conditions) one to gain code execution (and elevation of privileges to the level of privilege held by the vulnerable component such as NT AUTHORITY\SYSTEM) via DLL hijacking. This affects ldiscn32.exe, IpmiRedirectionService.exe, LDAPWhoAmI.exe, and ldprofile.exe.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://labs.jumpsec.com/advisory-cve-2020-13771-ivanti-uem-dll-hijacking/; https://labs.jumpsec.com/advisory-cve-2020-13771-ivanti-uem-dll-hijacking/
CVE: CVE-2020-16091
Published: 2020-11-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-27708. Reason: This candidate is a reservation duplicate of [ID]. Notes: All CVE users should reference CVE-2020-27708 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2020-24573
Published: 2020-11-12
Description: BAB TECHNOLOGIE GmbH eibPort V3 prior to 3.8.3 devices allow denial of service (Uncontrolled Resource Consumption) via requests to the lighttpd component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://psytester.github.io/CVE-2020-24573/; https://psytester.github.io/CVE-2020-24573/
CVE: CVE-2020-28247
Published: 2020-11-12
Description: The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/RustSec/advisory-db/pull/478/files; https://github.com/lettre/lettre; https://rustsec.org/advisories/RUSTSEC-2020-0069.html
CVE: CVE-2020-28269
Published: 2020-11-12
Description: Prototype pollution vulnerability in 'field' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://github.com/jprichardson/field/blob/2a3811dfc4cdd[PII_REDACTED]d2533534fc61ce06/lib/field.js#L39; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28269; https://github.com/jprichardson/field/blob/2a3811dfc4cdd[PII_REDACTED]d2533534fc61ce06/lib/field.js#L39
CVE: CVE-2020-28270
Published: 2020-11-12
Description: Prototype pollution vulnerability in 'object-hierarchy-access' versions 0.2.0 through 0.32.0 allows attacker to cause a denial of service and may lead to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://github.com/mjpclab/object-hierarchy-access/commit/7b1aa134a8bc4a376296bcfac5c3463aef2b7572; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28270; https://github.com/mjpclab/object-hierarchy-access/commit/7b1aa134a8bc4a376296bcfac5c3463aef2b7572
CVE: CVE-2020-28271
Published: 2020-11-12
Description: Prototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://github.com/sharpred/deepHas/commit/2fe011713a6178c50f7deb6f039a8e5435981e20; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28271; https://github.com/sharpred/deepHas/commit/2fe011713a6178c50f7deb6f039a8e5435981e20
CVE: CVE-2020-7472
Published: 2020-11-12
Description: An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7, 9.0 before 9.0.4, and 10.0 before 10.0.0 allows for unauthenticated remote code execution against a configured SugarCRM instance via crafted HTTP requests. (This is exploitable even after installation is completed.).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-94
References: https://support.sugarcrm.com/Documentation/Sugar_Versions/10.0/Pro/Sugar_10.0.0_Release_Notes/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2020-043/; https://support.sugarcrm.com/Documentation/Sugar_Versions/10.0/Pro/Sugar_10.0.0_Release_Notes/
CVE: CVE-2020-8676
Published: 2020-11-12
Description: Improper access control in the Intel(R) Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00368; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00368
CVE: CVE-2020-8677
Published: 2020-11-12
Description: Improper access control in the Intel(R) Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00368; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00368
CVE: CVE-2020-8690
Published: 2020-11-12
Description: Protection mechanism failure in Intel(R) Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access.
CVSS Score: 6.7 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00380; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00380
CVE: CVE-2020-8691
Published: 2020-11-12
Description: A logic issue in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access.
CVSS Score: 6.7 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00380; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00380
CVE: CVE-2020-8692
Published: 2020-11-12
Description: Insufficient access control in the firmware of the Intel(R) Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access.
CVSS Score: 6.7 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00380; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00380
CVE: CVE-2020-8693
Published: 2020-11-12
Description: Improper buffer restrictions in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access.
CVSS Score: 6.7 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00380; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00380
CVE: CVE-2020-8694
Published: 2020-11-12
Description: Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
References: https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf; https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html; https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html
CVE: CVE-2020-8695
Published: 2020-11-12
Description: Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-203
References: https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQ24MFBVH3HJW3PNRQBRY4YXKC7GA57W/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GRFC7UAPKAFFH5WX3AMDUBVHLKYQA2NZ/
CVE: CVE-2020-8696
Published: 2020-11-12
Description: Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-212
References: https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8698
Published: 2020-11-12
Description: Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-668
References: https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf; https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/
CVE: CVE-2020-8705
Published: 2020-11-12
Description: Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 3.1.80 and 4.0.30, Intel(R) SPS versions before E5_04.01.04.400, E3_04.01.04.200, SoC-X_04.00.04.200 and SoC-A_04.00.04.300 may allow an unauthenticated user to potentially enable escalation of privileges via physical access.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-1188
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8737
Published: 2020-11-12
Description: Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access.
CVSS Score: 6.8 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00388; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00388
CVE: CVE-2020-8738
Published: 2020-11-12
Description: Improper conditions check in Intel BIOS platform sample code for some Intel(R) Processors before may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-754
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00390; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8739
Published: 2020-11-12
Description: Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00390; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8740
Published: 2020-11-12
Description: Out of bounds write in Intel BIOS platform sample code for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00390; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8744
Published: 2020-11-12
Description: Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions before E3_05.01.04.200 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665
References: https://cert-portal.siemens.com/productcert/pdf/ssa-501073.pdf; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8745
Published: 2020-11-12
Description: Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVSS Score: 6.8 (MEDIUM)
References: https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8746
Published: 2020-11-12
Description: Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8747
Published: 2020-11-12
Description: Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network access.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8749
Published: 2020-11-12
Description: Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8750
Published: 2020-11-12
Description: Use after free in Kernel Mode Driver for Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8751
Published: 2020-11-12
Description: Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, Intel(R) TXE versions before 3.1.80 may allow an unauthenticated user to potentially enable information disclosure via physical access.
CVSS Score: 4.6 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391
CVE: CVE-2020-8752
Published: 2020-11-12
Description: Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8753
Published: 2020-11-12
Description: Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8754
Published: 2020-11-12
Description: Out-of-bounds read in subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8755
Published: 2020-11-12
Description: Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and E3_05.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391
CVE: CVE-2020-8756
Published: 2020-11-12
Description: Improper input validation in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8757
Published: 2020-11-12
Description: Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-125
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8760
Published: 2020-11-12
Description: Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8761
Published: 2020-11-12
Description: Inadequate encryption strength in subsystem for Intel(R) CSME versions before 13.0.40 and 13.30.10 may allow an unauthenticated user to potentially enable information disclosure via physical access.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-326
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8764
Published: 2020-11-12
Description: Improper access control in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00390; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/