Lucene search

[email protected]CVE-2020-24491

HistoryFeb 17, 2021 - 2:15 p.m.

CVE-2020-24491

2021-02-1714:15:17

CWE-20

[email protected]

web.nvd.nist.gov

intel

sgx

cve-2020-24491

10th generation

core processors

debug message

information disclosure

nvd

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

Debug message containing addresses of memory transactions in some Intel® 10th Generation Core Processors supporting SGX may allow a privileged user to potentially enable information disclosure via local access.

Affected configurations

NVD

Node

intelcore_i3Match1000g1

intelcore_i3Match1000g4

intelcore_i3Match1005g1

intelcore_i5Match1030g4

intelcore_i5Match1030g7

intelcore_i5Match1035g1

intelcore_i5Match1035g4

intelcore_i5Match1035g7

intelcore_i7Match1060g7

intelcore_i7Match1065g7

CPENameOperatorVersion
intel:core_i3intel core i3eq1000g1
intel:core_i3intel core i3eq1000g4
intel:core_i3intel core i3eq1005g1
intel:core_i5intel core i5eq1030g4
intel:core_i5intel core i5eq1030g7
intel:core_i5intel core i5eq1035g1
intel:core_i5intel core i5eq1035g4
intel:core_i5intel core i5eq1035g7
intel:core_i7intel core i7eq1060g7
intel:core_i7intel core i7eq1065g7

CPE	Name	Operator	Version
intel:core_i3	intel core i3	eq	1000g1
intel:core_i3	intel core i3	eq	1000g4
intel:core_i3	intel core i3	eq	1005g1
intel:core_i5	intel core i5	eq	1030g4
intel:core_i5	intel core i5	eq	1030g7
intel:core_i5	intel core i5	eq	1035g1
intel:core_i5	intel core i5	eq	1035g4
intel:core_i5	intel core i5	eq	1035g7
intel:core_i7	intel core i7	eq	1060g7
intel:core_i7	intel core i7	eq	1065g7

CNA Affected

[
  {
    "product": "Intel(R) 10th Generation Core Processors supporting SGX",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "See references"
      }
    ]
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00455.html

Social References

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

Related for CVE-2020-24491

intel1 nvd1 cvelist1 prion1 lenovo1