Medium severity · published Jan 28, 2020
CVE-2020-0549
Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access
5.5
CVSS
0.6%
EPSS
No
On KEV
Description
Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 47% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CI
Core I5 10110y Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I5 10210y Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I5 10310y Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I7 10510y Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I7 8500y Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I7 8550u Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I7 8559u Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I7 8560u Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I7 8565u Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I7 8650u Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I7-8569u Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I7-8700b Firmware · Intel
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-0549
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-0549
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00016.html
Broken Link
https://kc.mcafee.com/corporate/index?page=content&id=SB10318
Mailing List
https://lists.debian.org/debian-lts-announce/2020/06/msg00019.html
lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DT2VKDMQ3I37NBNJ256A2EXR7OJHXXKZ/
lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5OUM24ZC43G4IDT3JUCIHJTSDXJSK6Y/
Third Party Advisory
https://security.netapp.com/advisory/ntap-20200210-0004/
More from Core I5 10110y Firmware
6.5
CVE-2019-11135
TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with…
5.5
CVE-2020-0548
Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access
4.6
CVE-2021-33107
Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and Intel(R) MEBx before versions…