CVE-2020-0540

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Insufficiently protected credentials in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-522

Affected software

No affected versions have been published.

Timeline

Published: Jun 15, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-05416.7Out-of-bounds write in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow a privileged user to pote CVE-2020-05427.8Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated CVE-2020-05435.5Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially CVE-2020-05447.8Insufficient control flow management in the kernel mode driver for some Intel(R) Graphics Drivers before version 15.36.39.5145 may allow an CVE-2020-05454.4Integer overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and Intel(R) TXE versions before 3.1.75, 4.0.25 CVE-2020-05467.8Unquoted service path in Intel(R) Optane(TM) DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an authenti CVE-2020-05477.8Incorrect default permissions in the installer for Intel(R) Data Migration Software versions 3.3 and earlier may allow an authenticated user CVE-2020-05485.5Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.CVE-2020-05495.5Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information d CVE-2020-05505.6Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information d CVE-2020-05515.6Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable infor CVE-2020-05534.4Out-of-bounds read in kernel mode driver for some Intel(R) Wireless Bluetooth(R) products on Windows* 10, may allow a privileged user to pot