CVE-2020-24511CWE-668

CVE-2020-24511

Medium · published June 9, 2021

CVSS v3.1
6.5
EPSS
0%
Percentile
33.0
In the wild
Unconfirmed
What it is

Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00399 · 33.0th percentile
Weakness
CWE-668 · Exposure of Resource to Wrong Sphere
Published
2021-06-09T23:15Z
Affected products (5)
ProductVersionsFixed in
intel/microcode< 2021060820210608
debian/debian_linuxall versions—
netapp/fas\/aff_biosall versions—
netapp/hci_compute_node_biosall versions—
netapp/solidfire_biosall versions—
References (10)
https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf · [email protected]https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html · [email protected]https://security.netapp.com/advisory/ntap-20210611-0005/ · [email protected]https://www.debian.org/security/2021/dsa-4934 · [email protected]https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html · [email protected]https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20210611-0005/ · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2021/dsa-4934 · af854a3a-2127-422b-91ae-364da2661108https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 09 JUN 18:53Z
    Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local…
    cvelistv5