CVE-2020-24513
hw: information disclosure on some Intel Atom processors
Severity Score
6.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Una vulnerabilidad en la ejecución transitoria de omisión de dominios en algunos procesadores Intel Atom® puede permitir a un usuario autenticado permitir potencialmente una divulgación de información por medio de un acceso local
A potential domain bypass transient execution vulnerability was discovered on some Intel Atom® processors that uses a microarchitectural incidental channel. Currently this channel can reveal supervisor data in the L1 cache and the contents of recent stores. As a consequence, this issue may allow an authenticated user to potentially enable information disclosure via local access.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-08-19 CVE Reserved
- 2021-06-09 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf | Third Party Advisory |
|
| https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html | Mailing List |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.debian.org/security/2021/dsa-4934 | 2022-04-22 | |
| https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html | 2022-04-22 | |
| https://access.redhat.com/security/cve/CVE-2020-24513 | 2021-06-09 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1962666 | 2021-06-09 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Siemens Search vendor "Siemens" | Simatic Drive Controller Firmware Search vendor "Siemens" for product "Simatic Drive Controller Firmware" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic Drive Controller Search vendor "Siemens" for product "Simatic Drive Controller" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic Et 200sp Open Controller Firmware Search vendor "Siemens" for product "Simatic Et 200sp Open Controller Firmware" | < 0209_0105 Search vendor "Siemens" for product "Simatic Et 200sp Open Controller Firmware" and version " < 0209_0105" | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic Et 200sp Open Controller Search vendor "Siemens" for product "Simatic Et 200sp Open Controller" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic Ipc127e Firmware Search vendor "Siemens" for product "Simatic Ipc127e Firmware" | < 21.01.07 Search vendor "Siemens" for product "Simatic Ipc127e Firmware" and version " < 21.01.07" | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic Ipc127e Search vendor "Siemens" for product "Simatic Ipc127e" | - | - |
Safe
|
| Intel Search vendor "Intel" | Atom C3308 Search vendor "Intel" for product "Atom C3308" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom C3336 Search vendor "Intel" for product "Atom C3336" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom C3338 Search vendor "Intel" for product "Atom C3338" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom C3338r Search vendor "Intel" for product "Atom C3338r" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom C3436l Search vendor "Intel" for product "Atom C3436l" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom C3508 Search vendor "Intel" for product "Atom C3508" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom C3538 Search vendor "Intel" for product "Atom C3538" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom C3558 Search vendor "Intel" for product "Atom C3558" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom C3558r Search vendor "Intel" for product "Atom C3558r" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom C3558rc Search vendor "Intel" for product "Atom C3558rc" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom C3708 Search vendor "Intel" for product "Atom C3708" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom C3750 Search vendor "Intel" for product "Atom C3750" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom C3758 Search vendor "Intel" for product "Atom C3758" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom C3758r Search vendor "Intel" for product "Atom C3758r" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom C3808 Search vendor "Intel" for product "Atom C3808" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom C3830 Search vendor "Intel" for product "Atom C3830" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom C3850 Search vendor "Intel" for product "Atom C3850" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom C3858 Search vendor "Intel" for product "Atom C3858" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom C3950 Search vendor "Intel" for product "Atom C3950" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom C3955 Search vendor "Intel" for product "Atom C3955" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom C3958 Search vendor "Intel" for product "Atom C3958" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom P5942b Search vendor "Intel" for product "Atom P5942b" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom X5-a3930 Search vendor "Intel" for product "Atom X5-a3930" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom X5-a3940 Search vendor "Intel" for product "Atom X5-a3940" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom X5-a3950 Search vendor "Intel" for product "Atom X5-a3950" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom X5-a3960 Search vendor "Intel" for product "Atom X5-a3960" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom X6200fe Search vendor "Intel" for product "Atom X6200fe" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom X6211e Search vendor "Intel" for product "Atom X6211e" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom X6212re Search vendor "Intel" for product "Atom X6212re" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom X6413e Search vendor "Intel" for product "Atom X6413e" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom X6425e Search vendor "Intel" for product "Atom X6425e" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom X6425re Search vendor "Intel" for product "Atom X6425re" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Atom X6427fe Search vendor "Intel" for product "Atom X6427fe" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Celeron J3355 Search vendor "Intel" for product "Celeron J3355" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Celeron J3355e Search vendor "Intel" for product "Celeron J3355e" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Celeron J3455 Search vendor "Intel" for product "Celeron J3455" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Celeron J3455e Search vendor "Intel" for product "Celeron J3455e" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Celeron J4005 Search vendor "Intel" for product "Celeron J4005" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Celeron J4025 Search vendor "Intel" for product "Celeron J4025" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Celeron J4105 Search vendor "Intel" for product "Celeron J4105" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Celeron J4125 Search vendor "Intel" for product "Celeron J4125" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Celeron J6413 Search vendor "Intel" for product "Celeron J6413" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Celeron N3350 Search vendor "Intel" for product "Celeron N3350" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Celeron N3350e Search vendor "Intel" for product "Celeron N3350e" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Celeron N3450 Search vendor "Intel" for product "Celeron N3450" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Celeron N4000 Search vendor "Intel" for product "Celeron N4000" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Celeron N4020 Search vendor "Intel" for product "Celeron N4020" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Celeron N4100 Search vendor "Intel" for product "Celeron N4100" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Celeron N4120 Search vendor "Intel" for product "Celeron N4120" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Celeron N6211 Search vendor "Intel" for product "Celeron N6211" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Core I3-l13g4 Search vendor "Intel" for product "Core I3-l13g4" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Core I5-l16g7 Search vendor "Intel" for product "Core I5-l16g7" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | P5921b Search vendor "Intel" for product "P5921b" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | P5931b Search vendor "Intel" for product "P5931b" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | P5962b Search vendor "Intel" for product "P5962b" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Pentium J4205 Search vendor "Intel" for product "Pentium J4205" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Pentium J6425 Search vendor "Intel" for product "Pentium J6425" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Pentium N4200 Search vendor "Intel" for product "Pentium N4200" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Pentium N4200e Search vendor "Intel" for product "Pentium N4200e" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Pentium N6415 Search vendor "Intel" for product "Pentium N6415" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Pentium Silver J5005 Search vendor "Intel" for product "Pentium Silver J5005" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Pentium Silver J5040 Search vendor "Intel" for product "Pentium Silver J5040" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Pentium Silver N5000 Search vendor "Intel" for product "Pentium Silver N5000" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Pentium Silver N5030 Search vendor "Intel" for product "Pentium Silver N5030" | - | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 9.0 Search vendor "Debian" for product "Debian Linux" and version "9.0" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 10.0 Search vendor "Debian" for product "Debian Linux" and version "10.0" | - |
Affected
| ||||||