CVE-2020-12354

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Incorrect default permissions in Windows(R) installer in Intel(R) AMT SDK versions before 14.0.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-276

Affected software

No affected versions have been published.

Timeline

Published: Nov 12, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-123556.8Authentication bypass by capture-replay in RPMB protocol message authentication subsystem in Intel(R) TXE versions before 4.0.30 may allow a CVE-2020-123564.4Out-of-bounds read in subsystem in Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user CVE-2020-123576.7Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privile CVE-2020-123584.4Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via loc CVE-2020-123596.8Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable es CVE-2020-12367.8A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En CVE-2020-123607.8Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privileg CVE-2020-123615.5Use after free in some Intel(R) Graphics Drivers before version 15.33.51.5146 may allow an authenticated user to potentially enable denial o CVE-2020-123627.8Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and before Linux kernel vers CVE-2020-123635.5Improper input validation in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before Linux kernel version 5.5 m CVE-2020-123645.5Null pointer reference in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before version Linux kernel version CVE-2020-123655.5Untrusted pointer dereference in some Intel(R) Graphics Drivers before versions 15.33.51.5146, 15.45.32.5145, 15.36.39.5144 and 15.40.46.514