CVE-2020-24511

MediumCVSS 6.5/10Last modified Oct 8, 2026

Description

Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-668

Affected software

Vendor	Product	Versions
n/a	Intel(R) Processors	See references

References

https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdfThird Party Advisory
https://lists.debian.org/debian-lts-announce/2021/07/msg00022.htmlThird Party Advisory
https://security.netapp.com/advisory/ntap-20210611-0005/Third Party Advisory
https://www.debian.org/security/2021/dsa-4934Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.htmlVendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdfThird Party Advisory
https://lists.debian.org/debian-lts-announce/2021/07/msg00022.htmlThird Party Advisory
https://security.netapp.com/advisory/ntap-20210611-0005/Third Party Advisory
https://www.debian.org/security/2021/dsa-4934Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.htmlVendor Advisory

Timeline

Published: Jun 9, 2021
Last modified: Oct 8, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-245123.3Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via l CVE-2020-245136.5Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable infor CVE-2020-245146.8Improper authentication in some Intel(R) RealSense(TM) IDs may allow an unauthenticated user to potentially enable escalation of privilege v CVE-2020-245156.8Protection mechanism failure in some Intel(R) RealSense(TM) IDs may allow an unauthenticated user to potentially enable escalation of privil CVE-2020-245166.8Modification of assumed-immutable data in subsystem in Intel(R) CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may allow CVE-2020-245257.8Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potentially enable escalati CVE-2020-245485.3Ericom Access Server 9.2.0 (for AccessNow and Ericom Blaze) allows SSRF to make outbound WebSocket connection requests on arbitrary TCP port CVE-2020-245498.8openMAINT before 1.1-2.4.2 allows remote authenticated users to run arbitrary JSP code on the underlying web server.CVE-2020-245506.1An Open Redirect vulnerability in EpiServer Find before 13.2.7 allows an attacker to redirect users to untrusted websites via the _t_redirec CVE-2020-245516.1IProom MMC+ Server login page does not validate specific parameters properly. Attackers can use the vulnerability to redirect to any malicio CVE-2020-245527.2Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation, the device's web ma CVE-2020-245536.1Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.