CVE-2020-24486

תיאור (מקור, אנגלית)

Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.

מדדים

CVSS 3.1

5.5 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-18/10/2026

CWE

CWE-20

מוצרים מושפעים

intel: bios; intel: core i3-l13g4; intel: core i5-l16g7; intel: core i7-10510u; intel: core i7-10510y; intel: core i7-1060g7; intel: core i7-1060ng7; intel: core i7-10610u; intel: core i7-1065g7; intel: core i7-1068ng7; intel: core i7-10700; intel: core i7-10700e; intel: core i7-10700f; intel: core i7-10700k; intel: core i7-10700kf

קישורים

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0046‮… Vendor Advisory
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0046‮… Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf PatchThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf PatchThird Party Advisory
• https://security.netapp.com/advisory/ntap-20210702-0002/ Third Party Advisory
• https://security.netapp.com/advisory/ntap-20210702-0002/ Third Party Advisory