Critical Intel Active Management Technology Flaw Allows Privilege Escalation

🗓️ 08 Sep 2020 20:34:34Reported by Lindsey O'DonnellType

threatpost🔗 threatpost.com👁 109 Views

Critical Intel AMT Flaw Allows Privilege Escalation via Networ

Reporter	Title	Published	Views	Family All 188
zdt	Magento 2.4.0 / 2.3.5p1 (and earlier) Arbitrary Code Execution 0day Exploit	24 Mar 202100:00	–	zdt
ATTACKERKB	CVE-2020-8758	10 Sep 202015:16	–	attackerkb
ATTACKERKB	CVE-2020-24407	15 Oct 202023:00	–	attackerkb
BDU FSTEC	The vulnerability of Microprogramming Software under Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM) arises from operations that go beyond buffer boundaries in memory, allowing attackers to exploit their privileges.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel Active Management Technology and Standard Manageability implementations lies in the use of memory after it is freed, allowing attackers to increase their privileges.	29 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel Active Management Technology and Standard Manageability implementations lies in the possibility of operations exceeding the buffer boundaries in memory, allowing attackers to exploit their privileges.	29 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of measures to protect SQL query structures. This allows attackers to execute arbitrary SQL queries against the database in the target system and gain access to protected information.	12 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of restrictions on file uploads, which allows attackers to execute arbitrary code.	17 Nov 202000:00	–	bdu_fstec
Circl	CVE-2020-24400	15 Oct 202023:29	–	circl
Circl	CVE-2020-24407	15 Oct 202023:29	–	circl

Source	Link
threatpost	www.threatpost.com/intel-amt-loophole-allows-hackers-to-gain-control-of-some-pcs-in-under-a-minute/129408/
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00404.html
blogs	www.blogs.intel.com/technology/2020/09/intel-september-2020-security-advisories/
threatpost	www.threatpost.com/webinars/five-essentials-for-running-a-successful-bug-bounty-program/
threatpost	www.threatpost.com/critical-intel-flaws-fixed-in-active-management-technology/156458/
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
threatpost	www.threatpost.com/intel-amt-loophole-allows-hackers-to-gain-control-of-some-pcs-in-under-a-minute/129408/
threatpost	www.threatpost.com/webinars/five-essentials-for-running-a-successful-bug-bounty-program/

08 Sep 2020 20:34Current

9.2High risk

Vulners AI Score9.2

EPSS0.05272