Attacker Value
Unknown
0
CVE-2020-24513
0
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
Add References:
CVE-2020-24513
(Last updated October 07, 2023) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
MITRE ATT&CK
Select the MITRE ATT&CK Tactics that apply to this CVE
Collection
Select any Techniques used:
Command and Control
Select any Techniques used:
Credential Access
Select any Techniques used:
Defense Evasion
Select any Techniques used:
Discovery
Select any Techniques used:
Execution
Select any Techniques used:
Exfiltration
Select any Techniques used:
Impact
Select any Techniques used:
Initial Access
Select any Techniques used:
Lateral Movement
Select any Techniques used:
Persistence
Select any Techniques used:
Privilege Escalation
Select any Techniques used:
Topic Tags
Select the tags that apply to this CVE (Assessment added tags are disabled and cannot be removed)
What makes this of high-value to an attacker?
What makes this of low-value to an attacker?
Description
Domain-bypass transient execution vulnerability in some Intel Atom® Processors may allow an authenticated user to potentially enable information disclosure via local access.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
6.5 Medium
Impact Score:
4
Exploitability Score:
2
Attack Vector (AV):
Local
Attack Complexity (AC):
Low
Privileges Required (PR):
Low
User Interaction (UI):
None
Scope (S):
Changed
Confidentiality (C):
High
Integrity (I):
None
Availability (A):
None
General Information
Offensive Application
Unknown
Utility Class
Unknown
Ports
Unknown
OS
Unknown
Vulnerable Versions
Intel Atom(R) Processors See references
Prerequisites
Unknown
Discovered By
Unknown
PoC Author
Unknown
Metasploit Module
Unknown
Reporter
Unknown
Vendors
- debian,
- intel,
- siemens
Products
- atom c3308 -,
- atom c3336 -,
- atom c3338 -,
- atom c3338r -,
- atom c3436l -,
- atom c3508 -,
- atom c3538 -,
- atom c3558 -,
- atom c3558r -,
- atom c3558rc -,
- atom c3708 -,
- atom c3750 -,
- atom c3758 -,
- atom c3758r -,
- atom c3808 -,
- atom c3830 -,
- atom c3850 -,
- atom c3858 -,
- atom c3950 -,
- atom c3955 -,
- atom c3958 -,
- atom p5942b -,
- atom x5-a3930 -,
- atom x5-a3940 -,
- atom x5-a3950 -,
- atom x5-a3960 -,
- atom x6200fe -,
- atom x6211e -,
- atom x6212re -,
- atom x6413e -,
- atom x6425e -,
- atom x6425re -,
- atom x6427fe -,
- celeron j3355 -,
- celeron j3355e -,
- celeron j3455 -,
- celeron j3455e -,
- celeron j4005 -,
- celeron j4025 -,
- celeron j4105 -,
- celeron j4125 -,
- celeron j6413 -,
- celeron n3350 -,
- celeron n3350e -,
- celeron n3450 -,
- celeron n4000 -,
- celeron n4020 -,
- celeron n4100 -,
- celeron n4120 -,
- celeron n6211 -,
- core i3-l13g4 -,
- core i5-l16g7 -,
- debian linux 10.0,
- debian linux 9.0,
- p5921b -,
- p5931b -,
- p5962b -,
- pentium j4205 -,
- pentium j6425 -,
- pentium n4200 -,
- pentium n4200e -,
- pentium n6415 -,
- pentium silver j5005 -,
- pentium silver j5040 -,
- pentium silver n5000 -,
- pentium silver n5030 -,
- simatic drive controller firmware,
- simatic et 200sp open controller firmware,
- simatic ipc127e firmware
References
Additional Info
Authenticated
Unknown
Exploitable
Unknown
Reliability
Unknown
Stability
Unknown
Available Mitigations
Unknown
Shelf Life
Unknown
Userbase/Installbase
Unknown
Patch Effectiveness
Unknown
Rapid7
Technical Analysis
Report as Exploited in the Wild
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
