CVE-2020-24509

Опубликовано: 09 июн. 2021

Источник: nvd

CVSS3: 6.7

CVSS2: 4.6

EPSS Низкий

Описание

Insufficient control flow management in subsystem in Intel(R) SPS versions before SPS_E3_05.01.04.300.0, SPS_SoC-A_05.00.03.091.0, SPS_E5_04.04.04.023.0, or SPS_E5_04.04.03.263.0 may allow a privileged user to potentially enable escalation of privilege via local access.

Ссылки

https://security.netapp.com/advisory/ntap-20210611-0003/
Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00459.html
Vendor Advisory
https://security.netapp.com/advisory/ntap-20210611-0003/
Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00459.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:intel:server_platform_services:*:*:*:*:*:*:*:*

Версия до sps_soc-a_05.00.03.091.0 (исключая)

cpe:2.3:a:intel:server_platform_services:sps_e3_05.01.04.300.0:*:*:*:*:*:*:*

cpe:2.3:a:intel:server_platform_services:sps_e5_04.04.03.263.0:*:*:*:*:*:*:*

cpe:2.3:a:intel:server_platform_services:sps_e5_04.04.04.023.0:*:*:*:*:*:*:*

EPSS

Процентиль: 36%

0.0015

Низкий

6.7 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-6mp8-wq9g-p6q8

github

больше 3 лет назад