CVE-2020-8747

Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to…

published November 12, 2020

CVSS
—
EPSS
2%
Percentile
77.4
In the wild
Unconfirmed
What it is

⚠️ A sneaky out-of-bounds read in Intel AMT could let an unauthenticated user peek at sensitive information — think of it like someone peeping through your windows! 🔍 Imagine if your neighbor managed to lean over the fence and catch a glimpse of your private conversations. In this case, the out-of-bounds read flaw lets an attacker access sensitive data without needing an invitation, just like a nosy neighbor! An attacker could potentially disclose sensitive information or cause disruptions in service, leading to a frustrating experience for users. While it's not actively exploited, the mere possibility of unauthorized access should raise eyebrows and prompt immediate action.

Put simply

Imagine if your neighbor managed to lean over the fence and catch a glimpse of your private conversations. In this case, the out-of-bounds read flaw lets an attacker access sensitive data without needing an invitation, just like a nosy neighbor! This vulnerability arises from an out-of-bounds read in the Intel AMT subsystem, which allows attackers to access data that should be off-limits. Specifically, if the versions are before 11.8.80, 11.12.80, 11.22.80, 12.0.70, or 14.0.45, this can expose sensitive information or disrupt service.

What to do

An attacker could potentially disclose sensitive information or cause disruptions in service, leading to a frustrating experience for users. While it's not actively exploited, the mere possibility of unauthorized access should raise eyebrows and prompt immediate action. Update your Intel AMT to one of the fixed versions: 11.8.80, 11.12.80, 11.22.80, 12.0.70, or 14.0.45. Regularly review your network access configurations to prevent unauthorized access and ensure your security posture is solid. You've got this! Stay vigilant and keep your systems updated for ultimate protection! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01728 · 77.4th percentile
Published
2020-11-12T18:09Z
EPSS history
Timeline
  • 12 NOV 18:09Z
    Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to…
    cvelistv5