The vulnerability of Intel microprogramming software relates to the lack of protection for system data, which allows attackers to disclose protected information.

🗓️ 06 Jul 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Intel microprogramming vulnerability from lack of system data protection enabling remote attackers to disclose information.

Reporter	Title	Published	Views	Family All 142
IBM Security Bulletins	Security Bulletin: Linux Kernel as used by IBM QRadar SIEM contains multiple vulnerabilities	3 Dec 202118:41	–	ibm
IBM Security Bulletins	Security Bulletin: Kernel as used by IBM QRadar Network Packet Capture contains multiple vulnerabilities	14 Oct 202120:23	–	ibm
ATTACKERKB	CVE-2020-24513	9 Jun 202119:15	–	attackerkb
Tenable Nessus	Alibaba Cloud Linux 3 : 0040: microcode_ctl (ALINUX3-SA-2021:0040)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : microcode_ctl (ALSA-2021:2308)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : microcode_ctl (CESA-2021:2308)	16 Jun 202100:00	–	nessus
Tenable Nessus	Debian DLA-2718-1 : intel-microcode - LTS security update	26 Jul 202100:00	–	nessus
Tenable Nessus	Debian DSA-4934-1 : intel-microcode - security update	28 Jun 202100:00	–	nessus
Tenable Nessus	MiracleLinux 7 : microcode_ctl-2.1-73.9.el7 (AXSA:2021-1873:06)	20 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 4 : microcode_ctl-1.17-33.32.0.3.AXS4 (AXSA:2021-1922:07)	20 Jan 202600:00	–	nessus

Vulners

Node

intel intel_atomMatch06_5ch

OR

intel intel_atomMatch06_5fh

OR

intel intel_atomMatch06_7ah

OR

intel intel_atomMatch06_86h

OR

intel intel_atomMatch06_8ah

OR

intel intel_atomMatch06_96h

OR

intel intel_atomMatch06_9ch

OR

red_hat red_hat_enterprise_linuxMatch7

Source	Link
access	www.access.redhat.com/security/cve/cve-2020-24513
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-24513
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-24513
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16
altsp	www.altsp.su/obnovleniya-bezopasnosti/
web	www.web.nvd.nist.gov/view/vuln/detail
security-center	www.security-center.intel.com/advisory.aspx

16 Sep 2024 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 24.9

CVSS 36.5

EPSS0.00024

Intel microprogramming system data protection remote attacker information disclosure vulnerability description