Medium severity · published Mar 12, 2020
CVE-2020-0550
Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access
5.6
CVSS
0.3%
EPSS
No
On KEV
Description
Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. The list of affected products is provided in intel-sa-00330: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00330.html
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
C1
Celeron 1000m · Intel
All versions, or not specified · source: NVD
C1
Celeron 1005m · Intel
All versions, or not specified · source: NVD
C1
Celeron 1007u · Intel
All versions, or not specified · source: NVD
C1
Celeron 1017u · Intel
All versions, or not specified · source: NVD
C1
Celeron 1019y · Intel
All versions, or not specified · source: NVD
C1
Celeron 1020e · Intel
All versions, or not specified · source: NVD
C1
Celeron 1020m · Intel
All versions, or not specified · source: NVD
C1
Celeron 1037u · Intel
All versions, or not specified · source: NVD
C1
Celeron 1047ue · Intel
All versions, or not specified · source: NVD
C2
Celeron 2955u · Intel
All versions, or not specified · source: NVD
C2
Celeron 2957u · Intel
All versions, or not specified · source: NVD
C2
Celeron 2970m · Intel
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-0550
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-0550
Third Party Advisory
https://security.netapp.com/advisory/ntap-20200320-0001/
Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00330.html
More from Celeron 1000m
5.6
CVE-2020-0551
Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel…
5.5
CVE-2020-0543
Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via…