Login Request a demo
Medium severity · published Jun 15, 2020
CVE-2020-0543
Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via…
5.5
CVSS
0.5%
EPSS
No
On KEV
Description
Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
C1
Celeron 1000m · Intel
All versions, or not specified · source: NVD
C1
Celeron 1005m · Intel
All versions, or not specified · source: NVD
C1
Celeron 1007u · Intel
All versions, or not specified · source: NVD
C1
Celeron 1017u · Intel
All versions, or not specified · source: NVD
C1
Celeron 1019y · Intel
All versions, or not specified · source: NVD
C1
Celeron 1020e · Intel
All versions, or not specified · source: NVD
C1
Celeron 1020m · Intel
All versions, or not specified · source: NVD
C1
Celeron 1037u · Intel
All versions, or not specified · source: NVD
C1
Celeron 1047ue · Intel
All versions, or not specified · source: NVD
C2
Celeron 2955u · Intel
All versions, or not specified · source: NVD
C2
Celeron 2957u · Intel
All versions, or not specified · source: NVD
C2
Celeron 2970m · Intel
All versions, or not specified · source: NVD
Affected product
C1
Celeron 1000m
Intel
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-0543
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-0543
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00025.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00024.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00031.html
Mailing List
http://www.openwall.com/lists/oss-security/2020/07/14/5
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-534763.pdf
Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10318
More from Celeron 1000m
5.6
CVE-2020-0551
Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel…
5.6
CVE-2020-0550
Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access