Lucene search

PRIOn knowledge basePRION:CVE-2020-24507

HistoryJun 09, 2021 - 7:15 p.m.

Input validation

2021-06-0919:15:00

PRIOn knowledge base

www.prio-n.com

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.9 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0005 Low

EPSS

Percentile

14.5%

JSON

Improper initialization in a subsystem in the Intel® CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may allow a privileged user to potentially enable information disclosure via local access.

CPENameOperatorVersion
converged_security_and_manageability_enginelt12.0.81
converged_security_and_manageability_enginelt13.0.47
converged_security_and_manageability_enginelt13.30.17
converged_security_and_manageability_enginelt14.1.53
converged_security_and_manageability_enginelt14.5.32
converged_security_and_manageability_enginelt11.8.86
converged_security_and_manageability_enginelt11.12.86
converged_security_and_manageability_enginelt11.22.86
converged_security_and_manageability_enginelt13.50.11
converged_security_and_manageability_enginelt15.0.22

Name	Operator	Version
converged_security_and_manageability_engine	lt	12.0.81
converged_security_and_manageability_engine	lt	13.0.47
converged_security_and_manageability_engine	lt	13.30.17
converged_security_and_manageability_engine	lt	14.1.53
converged_security_and_manageability_engine	lt	14.5.32
converged_security_and_manageability_engine	lt	11.8.86
converged_security_and_manageability_engine	lt	11.12.86
converged_security_and_manageability_engine	lt	11.22.86
converged_security_and_manageability_engine	lt	13.50.11
converged_security_and_manageability_engine	lt	15.0.22

Rows per page:

1-10 of 141

References

cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf

security.netapp.com/advisory/ntap-20210611-0004/

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00459.html

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.9 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0005 Low

EPSS

Percentile

14.5%

JSON

Related for PRION:CVE-2020-24507