Intel Service Manager vulnerabilities

4 CVEs affecting Intel Service Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-8674, published 2020-06-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-0594, published 2020-06-15. Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days. Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of…
CVE-2020-0595, published 2020-06-15. Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days. Use after free in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of…
CVE-2020-0596, published 2020-06-15. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. Improper input validation in DHCPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable…
CVE-2020-8674, published 2020-06-15. Medium severity, CVSS 5.3. EPSS: 1.8% chance of exploitation in the next 30 days. Out-of-bounds read in DHCPv6 subsystem in Intel(R) AMT and Intel(R)ISM versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64 and 14.0.33 may allow an unauthenticated user to potentially enable…