{"id":"CVE-2020-8752","aliases":["EUVD-2020-29600","GHSA-cp56-958r-w2vj"],"status":"published","title":"Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11...","description":"Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01686,"percentile":0.77173,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-787"],"published":"2020-11-12T18:05:24Z","modified":"2026-06-17T03:26:53Z","products":[{"vendor":"intel","product":"active_management_technology_firmware"},{"vendor":"intel","product":"standard_manageability"},{"vendor":"netapp","product":"cloud_backup"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20201113-0003/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8752"},{"url":"https://github.com/advisories/GHSA-cp56-958r-w2vj"}],"sources":{"cve":[{"id":"CVE-2020-8752","description":"Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access.","status":"published","published":"2020-11-12T18:05:24Z","modified":"2024-08-04T10:12:09.645Z","updated_at":"2026-11-02T14:35:50.88562Z"}],"euvd":[{"id":"EUVD-2020-29600","description":"Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access.","status":"published","published":"2020-11-12T18:05:24Z","modified":"2024-08-04T10:12:09Z","updated_at":"2026-11-03T03:07:56.602123Z"}],"ghsa":[{"id":"GHSA-cp56-958r-w2vj","title":"Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11...","description":"Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access.","status":"published","published":"2022-05-24T17:34:12Z","modified":"2023-05-31T05:01:05Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:54:37.773458Z"}],"nvd":[{"id":"CVE-2020-8752","description":"Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access.","status":"published","published":"2020-11-12T18:15:17.753Z","modified":"2026-06-17T03:26:53.19Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:06:24.137599Z"}]}}