CVE-2020-0597

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthenticated user to potentially enable denial of service via network access.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	Intel(R) AMT and Intel(R) ISM	See provided reference

References

https://security.netapp.com/advisory/ntap-20200611-0007/Third Party Advisory
https://support.lenovo.com/de/en/product_security/len-30041Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.htmlVendor Advisory
https://www.kb.cert.org/vuls/id/257161Third Party Advisory, US Government Resource
https://www.synology.com/security/advisory/Synology_SA_20_15Third Party Advisory
https://security.netapp.com/advisory/ntap-20200611-0007/Third Party Advisory
https://support.lenovo.com/de/en/product_security/len-30041Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.htmlVendor Advisory
https://www.kb.cert.org/vuls/id/257161Third Party Advisory, US Government Resource
https://www.synology.com/security/advisory/Synology_SA_20_15Third Party Advisory

Timeline

Published: Jun 15, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-05987.8Uncontrolled search path in the installer for the Intel(R) Binary Configuration Tool for Windows, all versions, may allow an authenticated u CVE-2020-05996.7Improper access control in the PMC for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege vi CVE-2020-06007.8Improper buffer restrictions in firmware for some Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege CVE-2020-06018.1A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attac CVE-2020-06027.5A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerabilit CVE-2020-06038.8A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who su CVE-2020-06047.8A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attacke CVE-2020-06058.8A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s CVE-2020-06068.8A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s CVE-2020-06075.5An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphi CVE-2020-06085.5An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Dis CVE-2020-06099.8A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the