Strix
26.1K

CVE-2020-0550

MEDIUMCVSS 5.6/10EPSS 0.33%

Last modified

CVE-2020-0550 is a medium-severity vulnerability rated 5.6/10 on the CVSS scale. Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. The list of affected products is provided in intel-sa-00330: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00330.html. EPSS estimates a 0.33% chance of exploitation in the next 30 days.

Description

Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. The list of affected products is provided in intel-sa-00330: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00330.html

Metrics

CVSS 3.1
5.6/10

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS Probability
0.33%

25.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
IntelCeleron 1000mAll versions
IntelCeleron 1005mAll versions
IntelCeleron 1007uAll versions
IntelCeleron 1017uAll versions
IntelCeleron 1019yAll versions
IntelCeleron 1020eAll versions
IntelCeleron 1020mAll versions
IntelCeleron 1037uAll versions
IntelCeleron 1047ueAll versions
IntelCeleron 2955uAll versions
IntelCeleron 2957uAll versions
IntelCeleron 2970mAll versions
IntelCeleron 2980uAll versions
IntelCeleron 2981uAll versions
IntelCeleron 3765uAll versions
IntelCeleron 725cAll versions
IntelCeleron 787All versions
IntelCeleron 797All versions
IntelCeleron 807All versions
IntelCeleron 807ueAll versions
IntelCeleron 827eAll versions
IntelCeleron 847All versions
IntelCeleron 847eAll versions
IntelCeleron 857All versions
IntelCeleron 867All versions
IntelCeleron 877All versions
IntelCeleron 887All versions
IntelCeleron 927ueAll versions
IntelCeleron B710All versions
IntelCeleron B720All versions
IntelCeleron B800All versions
IntelCeleron B810All versions
IntelCeleron B810eAll versions
IntelCeleron B815All versions
IntelCeleron B820All versions
IntelCeleron B830All versions
IntelCeleron B840All versions
IntelCeleron G1610All versions
IntelCeleron G1610tAll versions
IntelCeleron G1620All versions
IntelCeleron G1620tAll versions
IntelCeleron G1630All versions
IntelCeleron G1820All versions
IntelCeleron G1820tAll versions
IntelCeleron G1830All versions
IntelCeleron G1840All versions
IntelCeleron G1840tAll versions
IntelCeleron G1850All versions
IntelCeleron G440All versions
IntelCeleron G460All versions

Showing 50 of 752 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2020-0550?
Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. The list of affected products is provided in intel-sa-00330: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00330.html
How severe is CVE-2020-0550?
CVE-2020-0550 has a CVSS score of 5.6/10 (MEDIUM severity). The EPSS model estimates a 0.33% probability of exploitation in the next 30 days.
How do I fix CVE-2020-0550?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2020-0550?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST