K12265377 : Intel AMT / ISM multiple vulnerabilities

Security Advisory Description

• CVE-2020-0594

Out-of-bounds read in IPv6 subsystem in Intel® AMT and Intel® ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

• CVE-2020-0595

Use after free in IPv6 subsystem in Intel® AMT and Intel® ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

• CVE-2020-0596

Improper input validation in DHCPv6 subsystem in Intel® AMT and Intel® ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access.

• CVE-2020-0597

Out-of-bounds read in IPv6 subsystem in Intel® AMT and Intel® ISM versions before 14.0.33 may allow an unauthenticated user to potentially enable denial of service via network access.

• CVE-2020-8674

Out-of-bounds read in DHCPv6 subsystem in Intel® AMT and Intel®ISM versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64 and 14.0.33 may allow an unauthenticated user to potentially enable information disclosure via network access.

Impact

There is no impact; F5 products are not affected by this vulnerability.