CVE Vulnerabilities

CVE-2020-0540

Insufficiently Protected Credentials

Published: Jun 15, 2020 | Modified: Jul 22, 2020
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Insufficiently protected credentials in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access.

Weakness

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Affected Software

Name Vendor Start Version End Version
Active_management_technology_firmware Intel 11.0 (including) 11.8.77 (excluding)
Active_management_technology_firmware Intel 11.10 (including) 11.12.77 (excluding)
Active_management_technology_firmware Intel 11.20 (including) 11.22.77 (excluding)
Active_management_technology_firmware Intel 12.0 (including) 12.0.64 (excluding)

Potential Mitigations

References