Lucene search

IntelCVE-2020-24491

HistoryFeb 17, 2021 - 2:15 p.m.

CVE-2020-24491

2021-02-1714:15:17

CWE-20

intel

web.nvd.nist.gov

intel

sgx

cve-2020-24491

10th generation

core processors

debug message

information disclosure

nvd

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.2

Confidence

High

EPSS

Percentile

12.6%

JSON

Debug message containing addresses of memory transactions in some Intel® 10th Generation Core Processors supporting SGX may allow a privileged user to potentially enable information disclosure via local access.

Affected configurations

Nvd

Node

intelcore_i3Match1000g1

intelcore_i3Match1000g4

intelcore_i3Match1005g1

intelcore_i5Match1030g4

intelcore_i5Match1030g7

intelcore_i5Match1035g1

intelcore_i5Match1035g4

intelcore_i5Match1035g7

intelcore_i7Match1060g7

intelcore_i7Match1065g7

VendorProductVersionCPE
intelcore_i31000g1cpe:2.3:h:intel:core_i3:1000g1:*:*:*:*:*:*:*
intelcore_i31000g4cpe:2.3:h:intel:core_i3:1000g4:*:*:*:*:*:*:*
intelcore_i31005g1cpe:2.3:h:intel:core_i3:1005g1:*:*:*:*:*:*:*
intelcore_i51030g4cpe:2.3:h:intel:core_i5:1030g4:*:*:*:*:*:*:*
intelcore_i51030g7cpe:2.3:h:intel:core_i5:1030g7:*:*:*:*:*:*:*
intelcore_i51035g1cpe:2.3:h:intel:core_i5:1035g1:*:*:*:*:*:*:*
intelcore_i51035g4cpe:2.3:h:intel:core_i5:1035g4:*:*:*:*:*:*:*
intelcore_i51035g7cpe:2.3:h:intel:core_i5:1035g7:*:*:*:*:*:*:*
intelcore_i71060g7cpe:2.3:h:intel:core_i7:1060g7:*:*:*:*:*:*:*
intelcore_i71065g7cpe:2.3:h:intel:core_i7:1065g7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	core_i3	1000g1	cpe:2.3:h:intel:core_i3:1000g1:::::::*
intel	core_i3	1000g4	cpe:2.3:h:intel:core_i3:1000g4:::::::*
intel	core_i3	1005g1	cpe:2.3:h:intel:core_i3:1005g1:::::::*
intel	core_i5	1030g4	cpe:2.3:h:intel:core_i5:1030g4:::::::*
intel	core_i5	1030g7	cpe:2.3:h:intel:core_i5:1030g7:::::::*
intel	core_i5	1035g1	cpe:2.3:h:intel:core_i5:1035g1:::::::*
intel	core_i5	1035g4	cpe:2.3:h:intel:core_i5:1035g4:::::::*
intel	core_i5	1035g7	cpe:2.3:h:intel:core_i5:1035g7:::::::*
intel	core_i7	1060g7	cpe:2.3:h:intel:core_i7:1060g7:::::::*
intel	core_i7	1065g7	cpe:2.3:h:intel:core_i7:1065g7:::::::*

CNA Affected

[
  {
    "product": "Intel(R) 10th Generation Core Processors supporting SGX",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "See references"
      }
    ]
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00455.html

Social References

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.2

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2020-24491