SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2020-0550

Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

MEDIUM 5.6EPSS 0.33%

Does this matter?

Lower severity and a low EPSS score (0.33%). Track it; it rarely justifies an emergency change on its own.

Description

Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. The list of affected products is provided in intel-sa-00330: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00330.html

CVSS 3.1
5.6 MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS
0.33% probability · 26th percentile
CISA KEV
Not listed
Affected
intel/celeron 1000m · intel/celeron 1005m · intel/celeron 1007u · intel/celeron 1017u · intel/celeron 1019y · intel/celeron 1020e · intel/celeron 1020m · intel/celeron 1037u · intel/celeron 1047ue · intel/celeron 2955u · intel/celeron 2957u · intel/celeron 2970m · intel/celeron 2980u · intel/celeron 2981u · intel/celeron 3765u · intel/celeron 725c · intel/celeron 787 · intel/celeron 797 · intel/celeron 807 · intel/celeron 807ue · +40 more
Source
secure@intel.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.