deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-4046
Published: 2020-06-12
Description: In affected versions of WordPress, users with low privileges (like contributors and authors) can use the embed block in a certain way to inject unfiltered HTML in the block editor. When affected posts are viewed by a higher privileged user, this could lead to script execution in the editor/wp-admin. This has been patched in version 5.4.2, along with all the previously affected versions via a minor release (5.3.4, 5.2.7, 5.1.6, 5.0.10, 4.9.15, 4.8.14, 4.7.18, 4.6.19, 4.5.22, 4.4.23, 4.3.24, 4.2.28, 4.1.31, 4.0.31, 3.9.32, 3.8.34, 3.7.34).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-rpwf-hrh2-39jf; https://lists.debian.org/debian-lts-announce/2020/07/msg00000.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/773N2ZV7QEMBGKH6FBKI6Q5S3YJMW357/
CVE: CVE-2020-4047
Published: 2020-06-12
Description: In affected versions of WordPress, authenticated users with upload permissions (like authors) are able to inject JavaScript into some media file attachment pages in a certain way. This can lead to script execution in the context of a higher privileged user when the file is viewed by them. This has been patched in version 5.4.2, along with all the previously affected versions via a minor release (5.3.4, 5.2.7, 5.1.6, 5.0.10, 4.9.15, 4.8.14, 4.7.18, 4.6.19, 4.5.22, 4.4.23, 4.3.24, 4.2.28, 4.1.31, 4.0.31, 3.9.32, 3.8.34, 3.7.34).
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-80
References: https://github.com/WordPress/wordpress-develop/commit/0977c0d6b241479ecedfe19e96be69f727c3f81f; https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-8q2w-5m27-wm27; https://lists.debian.org/debian-lts-announce/2020/07/msg00000.html
CVE: CVE-2020-4048
Published: 2020-06-12
Description: In affected versions of WordPress, due to an issue in wp_validate_redirect() and URL sanitization, an arbitrary external link can be crafted leading to unintended/open redirect when clicked. This has been patched in version 5.4.2, along with all the previously affected versions via a minor release (5.3.4, 5.2.7, 5.1.6, 5.0.10, 4.9.15, 4.8.14, 4.7.18, 4.6.19, 4.5.22, 4.4.23, 4.3.24, 4.2.28, 4.1.31, 4.0.31, 3.9.32, 3.8.34, 3.7.34).
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-601
References: https://github.com/WordPress/wordpress-develop/commit/6ef777e9a022bee2a80fa671118e7e2657e52693; https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-q6pw-gvf4-5fj5; https://lists.debian.org/debian-lts-announce/2020/07/msg00000.html
CVE: CVE-2020-4049
Published: 2020-06-12
Description: In affected versions of WordPress, when uploading themes, the name of the theme folder can be crafted in a way that could lead to JavaScript execution in /wp-admin on the themes page. This does require an admin to upload the theme, and is low severity self-XSS. This has been patched in version 5.4.2, along with all the previously affected versions via a minor release (5.3.4, 5.2.7, 5.1.6, 5.0.10, 4.9.15, 4.8.14, 4.7.18, 4.6.19, 4.5.22, 4.4.23, 4.3.24, 4.2.28, 4.1.31, 4.0.31, 3.9.32, 3.8.34, 3.7.34).
CVSS Score: 2.4 (LOW)
CWE: CWE-80, CWE-79
References: https://github.com/WordPress/wordpress-develop/commit/404f397b4012fd9d382e55bf7d206c1317f01148; https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-87h4-phjv-rm6p; https://lists.debian.org/debian-lts-announce/2020/07/msg00000.html
CVE: CVE-2020-4050
Published: 2020-06-12
Description: In affected versions of WordPress, misuse of the `set-screen-option` filter's return value allows arbitrary user meta fields to be saved. It does require an admin to install a plugin that would misuse the filter. Once installed, it can be leveraged by low privileged users. This has been patched in version 5.4.2, along with all the previously affected versions via a minor release (5.3.4, 5.2.7, 5.1.6, 5.0.10, 4.9.15, 4.8.14, 4.7.18, 4.6.19, 4.5.22, 4.4.23, 4.3.24, 4.2.28, 4.1.31, 4.0.31, 3.9.32, 3.8.34, 3.7.34).
CVSS Score: 3.5 (LOW)
CWE: CWE-288
References: https://github.com/WordPress/wordpress-develop/commit/b8dea76b495f[PII_REDACTED]c6ec46b9ea0d2a0920; https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-4vpv-fgg2-gcqc; https://lists.debian.org/debian-lts-announce/2020/07/msg00000.html
CVE: CVE-2019-15123
Published: 2020-06-12
Description: The Branding Module in Viki Vera 4.9.1.26180 allows an authenticated user to change the logo on the website. An attacker could use this to upload a malicious .aspx file and gain Remote Code Execution on the site.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://www.vikisolutions.com/products/Vera.html; https://www.gosecure.net/blog/2020/06/11/vera-vulnerable-to-authenticated-remote-code-execution-cve-2019-15123/; http://www.vikisolutions.com/products/Vera.html
CVE: CVE-2020-11980
Published: 2020-06-12
Description: In Karaf, JMX authentication takes place using JAAS and authorization takes place using ACL files. By default, only an "admin" can actually invoke on an MBean. However there is a vulnerability there for someone who is not an admin, but has a "viewer" role. In the 'etc/jmx.acl.cfg', such as role can call get*. It's possible to authenticate as a viewer role + invokes on the MLet getMBeansFromURL method, which goes off to a remote server to fetch the desired MBean, which is then registered in Karaf. At this point the attack fails as "viewer" doesn't have the permission to invoke on the MBean. Still, it could act as a SSRF style attack and also it essentially allows a "viewer" role to pollute the MBean registry, which is a kind of privilege escalation. The vulnerability is low as it's possible to add a ACL to limit access. Users should update to Apache Karaf 4.2.9 or newer.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: http://karaf.apache.org/security/cve-2020-11980.txt; http://karaf.apache.org/security/cve-2020-11980.txt
CVE: CVE-2019-16252
Published: 2020-06-12
Description: Missing SSL Certificate Validation in the Nutfind.com application through 3.9.12 for Android allows a man-in-the-middle attacker to sniff and manipulate all API requests, including login credentials and location data.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://arxiv.org/pdf/2005.08208.pdf; https://arxiv.org/pdf/2005.08208.pdf
CVE: CVE-2020-10752
Published: 2020-06-12
Description: A flaw was found in the OpenShift API Server, where it failed to sufficiently protect OAuthTokens by leaking them into the logs when an API Server panic occurred. This flaw allows an attacker with the ability to cause an API Server error to read the logs, and use the leaked OAuthToken to log into the API Server with the leaked token.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522, CWE-532
References: https://github.com/openshift/enhancements/pull/323; https://github.com/openshift/origin/blob/master/vendor/k8s.io/kubernetes/staging/src/k8s.io/apiserver/pkg/server/filters/wrap.go#L39; https://github.com/openshift/enhancements/pull/323
CVE: CVE-2020-11839
Published: 2020-06-12
Description: Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Logger product, affecting all version from 6.6.1 up to version 7.0.1. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://softwaresupport.softwaregrp.com/doc/KM03650887; https://softwaresupport.softwaregrp.com/doc/KM03650887
CVE: CVE-2020-13656
Published: 2020-06-12
Description: In Morgan Stanley Hobbes through 2020-05-21, the array implementation lacks bounds checking, allowing exploitation of an out-of-bounds (OOB) read/write vulnerability that leads to both local and remote code (via RPC) execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-787
References: https://know.bishopfox.com/advisories/oob-to-rce-exploitation-of-the-hobbes-functional-interpreter; https://know.bishopfox.com/advisories/oob-to-rce-exploitation-of-the-hobbes-functional-interpreter
CVE: CVE-2020-14061
Published: 2020-06-14
Description: FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and oracle.jms.AQjmsXAConnectionFactory (aka weblogic/oracle-aqjms).
CVSS Score: 8.1 (HIGH)
CWE: CWE-502, CWE-502
References: https://github.com/FasterXML/jackson-databind/issues/2698; https://lists.debian.org/debian-lts-announce/2020/07/msg00001.html; https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
CVE: CVE-2020-14062
Published: 2020-06-14
Description: FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2).
CVSS Score: 8.1 (HIGH)
CWE: CWE-502
References: https://github.com/FasterXML/jackson-databind/issues/2704; https://lists.debian.org/debian-lts-announce/2020/07/msg00001.html; https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
CVE: CVE-2020-14060
Published: 2020-06-14
Description: FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).
CVSS Score: 8.1 (HIGH)
CWE: CWE-502
References: https://github.com/FasterXML/jackson-databind/issues/2688; https://lists.debian.org/debian-lts-announce/2020/07/msg00001.html; https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
CVE: CVE-2020-14067
Published: 2020-06-15
Description: The install_from_hash functionality in Navigate CMS 2.9 does not consider the .phtml extension when examining files within a ZIP archive that may contain PHP code, in check_upload in lib/packages/extensions/extension.class.php and lib/packages/themes/theme.class.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/NavigateCMS/Navigate-CMS/commit/f1f47126b359d73a2635306ae46d8719c14d240b; https://github.com/NavigateCMS/Navigate-CMS/commit/f1f47126b359d73a2635306ae46d8719c14d240b
CVE: CVE-2020-14074
Published: 2020-06-15
Description: TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action kick_ban_wifi_mac_allow with a sufficiently long qcawifi.wifi0_vap0.maclist key.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-kick_ban_wifi.pdf; https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/kick_ban_wifi_mac_allow_overflow.pdf; https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-kick_ban_wifi.pdf
CVE: CVE-2020-14075
Published: 2020-06-15
Description: TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action pppoe_connect, ru_pppoe_connect, or dhcp_connect with the key wan_ifname (or wan0_dns), allowing an authenticated user to run arbitrary commands on the device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-dhcp_connect.pdf; https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/dhcp_connect_command.pdf; https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-dhcp_connect.pdf
CVE: CVE-2020-14077
Published: 2020-06-15
Description: TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action set_sta_enrollee_pin_wifi1 (or set_sta_enrollee_pin_wifi0) with a sufficiently long wps_sta_enrollee_pin key.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-set_sta_enrollee.pdf; https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/set_sta_enrollee_pin_wifi_overflow.pdf; https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-set_sta_enrollee.pdf
CVE: CVE-2020-14078
Published: 2020-06-15
Description: TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action wifi_captive_portal_login with a sufficiently long REMOTE_ADDR key.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-wifi_captive.pdf; https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/wifi_captive_portal_login_overflow.pdf; https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-wifi_captive.pdf
CVE: CVE-2020-14079
Published: 2020-06-15
Description: TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action auto_up_fw (or auto_up_lp) with a sufficiently long update_file_name key.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-auto_up_fw.pdf; https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-auto_up_lp.pdf; https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/auto_up_fw_overflow.pdf
CVE: CVE-2020-14080
Published: 2020-06-15
Description: TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an unauthenticated user to execute arbitrary code by POSTing to apply_sec.cgi via the action ping_test with a sufficiently long ping_ipaddr key.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-ping_test.pdf; https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/ping_test_overflow.pdf; https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-ping_test.pdf
CVE: CVE-2020-14081
Published: 2020-06-15
Description: TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action send_log_email with the key auth_acname (or auth_passwd), allowing an authenticated user to run arbitrary commands on the device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/send_log_email_command.pdf; https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/send_log_email_command.pdf
CVE: CVE-2020-14093
Published: 2020-06-15
Description: Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-319
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00064.html; http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00070.html; http://www.mutt.org
CVE: CVE-2020-14076
Published: 2020-06-15
Description: TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action st_dev_connect, st_dev_disconnect, or st_dev_rconnect with a sufficiently long wan_type key.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-st_dev.pdf; https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/st_dev_connect_overflow.pdf; https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/st_dev_disconnect_overflow.pdf
CVE: CVE-2019-19109
Published: 2020-06-15
Description: The wpForo plugin 1.6.5 for WordPress allows wp-admin/admin.php?page=wpforo-usergroups CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://twitter.com/Sh0ckFR/status/[PII_REDACTED]27053313; https://twitter.com/Sh0ckFR/status/[PII_REDACTED]27053313
CVE: CVE-2019-19110
Published: 2020-06-15
Description: The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases s parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://twitter.com/Sh0ckFR/status/[PII_REDACTED]27053313; https://twitter.com/Sh0ckFR/status/[PII_REDACTED]27053313
CVE: CVE-2019-19111
Published: 2020-06-15
Description: The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases langid parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://twitter.com/Sh0ckFR/status/[PII_REDACTED]27053313; https://twitter.com/Sh0ckFR/status/[PII_REDACTED]27053313
CVE: CVE-2019-19112
Published: 2020-06-15
Description: The wpForo plugin 1.6.5 for WordPress allows XSS involving the wpf-dw-td-value class of dashboard.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://twitter.com/Sh0ckFR/status/[PII_REDACTED]27053313; https://twitter.com/Sh0ckFR/status/[PII_REDACTED]27053313
CVE: CVE-2020-0527
Published: 2020-06-15
Description: Insufficient control flow management in firmware for some Intel(R) Data Center SSDs may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 4.4 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00266.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00266.html
CVE: CVE-2020-0528
Published: 2020-06-15
Description: Improper buffer restrictions in BIOS firmware for 7th, 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00322.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00322.html
CVE: CVE-2020-0529
Published: 2020-06-15
Description: Improper initialization in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow an unauthenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00322.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00322.html
CVE: CVE-2020-0531
Published: 2020-06-15
Description: Improper input validation in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an authenticated user to potentially enable information disclosure via network access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.lenovo.com/de/en/product_security/len-30041; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
CVE: CVE-2020-0532
Published: 2020-06-15
Description: Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.lenovo.com/de/en/product_security/len-30041; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
CVE: CVE-2020-0533
Published: 2020-06-15
Description: Reversible one-way hash in Intel(R) CSME versions before 11.8.76, 11.12.77 and 11.22.77 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-326
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.lenovo.com/de/en/product_security/len-30041; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
CVE: CVE-2020-0534
Published: 2020-06-15
Description: Improper input validation in the DAL subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an unauthenticated user to potentially enable denial of service via network access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.lenovo.com/de/en/product_security/len-30041; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
CVE: CVE-2020-0535
Published: 2020-06-15
Description: Improper input validation in Intel(R) AMT versions before 11.8.76, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.lenovo.com/de/en/product_security/len-30041; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
CVE: CVE-2020-0536
Published: 2020-06-15
Description: Improper input validation in the DAL subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and Intel(R) TXE versions before 3.1.75 and 4.0.25 may allow an unauthenticated user to potentially enable information disclosure via network access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.lenovo.com/de/en/product_security/len-30041; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
CVE: CVE-2020-0537
Published: 2020-06-15
Description: Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow a privileged user to potentially enable denial of service via network access.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.lenovo.com/de/en/product_security/len-30041; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
CVE: CVE-2020-0538
Published: 2020-06-15
Description: Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of service via network access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.lenovo.com/de/en/product_security/len-30041; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
CVE: CVE-2020-0539
Published: 2020-06-15
Description: Path traversal in subsystem for Intel(R) DAL software for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 and Intel(R) TXE versions before 3.1.75, 4.0.25 may allow an unprivileged user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.lenovo.com/de/en/product_security/len-30041; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
CVE: CVE-2020-0540
Published: 2020-06-15
Description: Insufficiently protected credentials in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.lenovo.com/de/en/product_security/len-30041; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html