CVE-2020-8758
CRITICALIntel(R) AMT/ISM <11.8.79-12.0.68-14.0.39 - Privilege Escalation
Title source: llmDescription
Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an unauthenticated user to potentially enable escalation of privilege via network access. On un-provisioned systems, an authenticated user may potentially enable escalation of privilege via local access.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_misc
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00404.html
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20200911-0005/
Scores
CVSS v3
9.8
EPSS
0.0130
EPSS Percentile
80.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
Status
published
Products (3)
intel/active_management_technology_firmware
11.8 - 11.8.79
intel/standard_manageability
11.8 - 11.8.79
netapp/steelstore_cloud_integrated_storage
Published
Sep 10, 2020
Tracked Since
Feb 18, 2026