CVE-2020-24512CWE-203

CVE-2020-24512

Low · published June 9, 2021

CVSS v3.1
3.3
EPSS
0%
Percentile
31.2
In the wild
Unconfirmed
What it is

Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00383 · 31.2th percentile
Weakness
CWE-203 · Observable Discrepancy
Published
2021-06-09T23:15Z
Affected products (5)
ProductVersionsFixed in
intel/microcode< 2021060820210608
debian/debian_linuxall versions—
netapp/fas\/aff_biosall versions—
netapp/hci_compute_node_biosall versions—
netapp/solidfire_biosall versions—
References (10)
https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf · [email protected]https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html · [email protected]https://security.netapp.com/advisory/ntap-20210611-0005/ · [email protected]https://www.debian.org/security/2021/dsa-4934 · [email protected]https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html · [email protected]https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20210611-0005/ · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2021/dsa-4934 · af854a3a-2127-422b-91ae-364da2661108https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 09 JUN 18:53Z
    Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access
    cvelistv5