CVE-2020-24489

Vulnerability in N/a Intel(R) VT D Products

CVSS score

8.8

EPSS probability

%0.4

Risk score

0.0

Published

5 y ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2020-24489 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2020-24489 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

ID	VENDOR	PRODUCT	ACTION
1	n/a	Intel(R) VT-d products	View
2	intel	atom x5-e3930	View
3	intel	atom x5-e3940	View
4	intel	atom x7-e3950	View
5	intel	celeron j1750	View
6	intel	celeron j1800	View
7	intel	celeron j1850	View
8	intel	celeron j1900	View
9	intel	celeron j3060	View
10	intel	celeron j3160	View
11	intel	celeron j3355	View
12	intel	celeron j3355e	View
13	intel	celeron j3455	View
14	intel	celeron j3455e	View
15	intel	celeron j4005	View
16	intel	celeron j4025	View
17	intel	celeron j4105	View
18	intel	celeron j4115	View
19	intel	celeron j4125	View
20	intel	celeron j6412	View
21	intel	celeron j6413	View
22	intel	celeron n2805	View
23	intel	celeron n2806	View
24	intel	celeron n2807	View
25	intel	celeron n2808	View
26	intel	celeron n2810	View
27	intel	celeron n2815	View
28	intel	celeron n2820	View
29	intel	celeron n2830	View
30	intel	celeron n2840	View
31	intel	celeron n2910	View
32	intel	celeron n2920	View
33	intel	celeron n2930	View
34	intel	celeron n2940	View
35	intel	celeron n3000	View
36	intel	celeron n3010	View
37	intel	celeron n3050	View
38	intel	celeron n3060	View
39	intel	celeron n3150	View
40	intel	celeron n3160	View
41	intel	celeron n3350	View
42	intel	celeron n3350e	View
43	intel	celeron n3450	View
44	intel	celeron n4000	View
45	intel	celeron n4000c	View
46	intel	celeron n4020	View
47	intel	celeron n4020c	View
48	intel	celeron n4100	View
49	intel	celeron n4120	View
50	intel	celeron n4500	View
51	intel	celeron n4505	View
52	intel	celeron n5095	View
53	intel	celeron n5100	View
54	intel	celeron n5105	View
55	intel	celeron n6210	View
56	intel	celeron n6211	View
57	intel	core i3-1000g1	View
58	intel	core i3-1000g4	View
59	intel	core i3-1000ng4	View
60	intel	core i3-1005g1	View
61	intel	core i3-10100	View
62	intel	core i3-10100e	View
63	intel	core i3-10100f	View
64	intel	core i3-10100t	View
65	intel	core i3-10100te	View
66	intel	core i3-10100y	View
67	intel	core i3-10105	View
68	intel	core i3-10105f	View
69	intel	core i3-10105t	View
70	intel	core i3-10110u	View
71	intel	core i3-10110y	View
72	intel	core i3-10300	View
73	intel	core i3-10300t	View
74	intel	core i3-10305	View
75	intel	core i3-10305t	View
76	intel	core i3-10320	View
77	intel	core i3-10325	View
78	intel	core i3-11100b	View
79	intel	core i3-1110g4	View
80	intel	core i3-1115g4	View
81	intel	core i3-1115g4e	View
82	intel	core i3-1115gre	View
83	intel	core i3-1120g4	View
84	intel	core i3-1125g4	View
85	intel	core i3-l13g4	View
86	intel	core i5-10200h	View
87	intel	core i5-10210u	View
88	intel	core i5-10210y	View
89	intel	core i5-10300h	View
90	intel	core i5-1030g4	View
91	intel	core i5-1030g7	View
92	intel	core i5-1030ng7	View
93	intel	core i5-10310u	View
94	intel	core i5-10310y	View
95	intel	core i5-1035g1	View
96	intel	core i5-1035g4	View
97	intel	core i5-1035g7	View
98	intel	core i5-1038ng7	View
99	intel	core i5-10400	View
100	intel	core i5-10400f	View
101	intel	core i5-10400h	View
102	intel	core i5-10400t	View
103	intel	core i5-10500	View
104	intel	core i5-10500e	View
105	intel	core i5-10500h	View
106	intel	core i5-10500t	View
107	intel	core i5-10500te	View
108	intel	core i5-10505	View
109	intel	core i5-10600	View
110	intel	core i5-10600k	View
111	intel	core i5-10600kf	View
112	intel	core i5-10600t	View
113	intel	core i5-11260h	View
114	intel	core i5-11300h	View
115	intel	core i5-1130g7	View
116	intel	core i5-11320h	View
117	intel	core i5-1135g7	View
118	intel	core i5-11400	View
119	intel	core i5-11400f	View
120	intel	core i5-11400h	View
121	intel	core i5-11400t	View
122	intel	core i5-1140g7	View
123	intel	core i5-1145g7	View
124	intel	core i5-1145g7e	View
125	intel	core i5-1145gre	View
126	intel	core i5-11500	View
127	intel	core i5-11500b	View
128	intel	core i5-11500h	View
129	intel	core i5-11500t	View
130	intel	core i5-1155g7	View
131	intel	core i5-11600	View
132	intel	core i5-11600k	View
133	intel	core i5-11600kf	View
134	intel	core i5-11600t	View
135	intel	core i5-l16g7	View
136	intel	core i7-10510u	View
137	intel	core i7-10510y	View
138	intel	core i7-1060g7	View
139	intel	core i7-1060ng7	View
140	intel	core i7-10610u	View
141	intel	core i7-1065g7	View
142	intel	core i7-1068ng7	View
143	intel	core i7-10700	View
144	intel	core i7-10700e	View
145	intel	core i7-10700f	View
146	intel	core i7-10700k	View
147	intel	core i7-10700kf	View
148	intel	core i7-10700t	View
149	intel	core i7-10700te	View
150	intel	core i7-10710u	View
151	intel	core i7-10750h	View
152	intel	core i7-10810u	View
153	intel	core i7-10850h	View
154	intel	core i7-10870h	View
155	intel	core i7-10875h	View
156	intel	core i7-11370h	View
157	intel	core i7-11375h	View
158	intel	core i7-11390h	View
159	intel	core i7-1160g7	View
160	intel	core i7-1165g7	View
161	intel	core i7-11700	View
162	intel	core i7-11700b	View
163	intel	core i7-11700f	View
164	intel	core i7-11700k	View
165	intel	core i7-11700kf	View
166	intel	core i7-11700t	View
167	intel	core i7-11800h	View
168	intel	core i7-1180g7	View
169	intel	core i7-11850h	View
170	intel	core i7-1185g7	View
171	intel	core i7-1185g7e	View
172	intel	core i7-1185gre	View
173	intel	core i7-1195g7	View
174	intel	core i9-10850k	View
175	intel	core i9-10885h	View
176	intel	core i9-10900	View
177	intel	core i9-10900e	View
178	intel	core i9-10900f	View
179	intel	core i9-10900k	View
180	intel	core i9-10900kf	View
181	intel	core i9-10900t	View
182	intel	core i9-10900te	View
183	intel	core i9-10910	View
184	intel	core i9-10980hk	View
185	intel	core i9-11900	View
186	intel	core i9-11900f	View
187	intel	core i9-11900h	View
188	intel	core i9-11900k	View
189	intel	core i9-11900kb	View
190	intel	core i9-11900kf	View
191	intel	core i9-11900t	View
192	intel	core i9-11950h	View
193	intel	core i9-11980hk	View
194	intel	pentium j2850	View
195	intel	pentium j2900	View
196	intel	pentium j3710	View
197	intel	pentium j4205	View
198	intel	pentium j6426	View
199	intel	pentium n3510	View
200	intel	pentium n3520	View

Total affected vendors: 2|Products: 200

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCORE	VERSION	SEVERITY	VECTOR	SOURCE
8.8	CVSS V31	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	NVD
4.6	CVSS V2	—	AV:L/AC:L/Au:N/C:P/I:P/A:P	NVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.

Restrict access to internet-facing services and apply network segmentation.

Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.

Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2020-24489 is associated with the following CWEs:

CWE-459: Common Weakness Enumeration Entry CWE-459

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2020-24489 weaknesses.

CAPEC-66: SQL Injection CAPEC-126: Path Traversal CAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim

PermissionsLow

UserGerekmiyor

Official Sources and Advisories

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.htmlvendor-advisory DSA-4934vendor-advisory [debian-lts-announce] 20210726 [SECURITY] [DLA 2718-1] intel-microcode security updatevendor-advisory

CVSS Vector Radar Chart

8.8 / 10

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredLow privileges

User InteractionNone required

Confidentiality (Gizlilik)Low

Integrity (Bütünlük)None

Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

n/a

intel

Weakness Type (CWE & CAPEC)

CWE-459

Similar Vulnerabilities

10.0

CVE-2021-44228 Actively exploitedImproper input validation in Apache Log4j

Vendorsiemens Product6bk1602-0aa12-0tp0 firmware+16 etkilenen

Patch verified Public Exploits:22EPSS %1004 y ago

10.0

CVE-2015-3306 Actively exploitedImproper access control in N/a

Vendorn/a Productn/a+10 etkilenen

Workaround Public Exploits:5EPSS %9911 y ago

9.8

CVE-2021-21985 Actively exploitedVulnerability in N/a VMware vCenter Server And VMware Cloud Foundation

Vendorn/a ProductVMware vCenter Server and VMware Cloud Foundation+3 etkilenen

Workaround Public Exploits:10EPSS %1005 y ago

9.8

CVE-2019-19781 Actively exploitedVulnerability in N/a

Vendorn/a Productn/a+7 etkilenen

Workaround Public Exploits:13EPSS %1006 y ago

9.8

CVE-2021-21972 Actively exploitedVulnerability in N/a VMware vCenter Server

Vendorn/a ProductVMware vCenter Server+4 etkilenen

Workaround Public Exploits:11EPSS %1005 y ago

9.8

CVE-2019-15107 Actively exploitedVulnerability in N/a

Vendorn/a Productn/a+2 etkilenen

Workaround Public Exploits:13EPSS %1007 y ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2020-24489"