Description
Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network access.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_misc
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20201113-0003/
Scores
CVSS v3
9.1
EPSS
0.0080
EPSS Percentile
74.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Details
CWE
CWE-125
Status
published
Products (2)
intel/active_management_technology_firmware
< 11.8.80
netapp/cloud_backup
Published
Nov 12, 2020
Tracked Since
Feb 18, 2026