Buffer overflow in Active Management Technology SDK and Standard Manageability (ISM) - CVE-2020-8758
Published: September 9, 2020
Vulnerability identifier: #VU46548
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-8758
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM. A remote attacker can send specially crafted traffic to the affected system, trigger buffer overflow and execute arbitrary code on the system.
Affected software
Active Management Technology SDK
Standard Manageability (ISM)
Standard Manageability (ISM)
How to mitigate CVE-2020-8758
Install updates from vendor's website.
Active Management Technology SDK - addressed in versions 11.8.79, 11.12.79, 11.22.79, 12.0.68, 14.0.39
Standard Manageability (ISM) - addressed in versions 11.8.79, 11.12.79, 11.22.79, 12.0.68, 14.0.39
Standard Manageability (ISM) - addressed in versions 11.8.79, 11.12.79, 11.22.79, 12.0.68, 14.0.39