What is the CVSS score of CVE-2020-0553?

CVE-2020-0553 has a CVSS 3.1 base score of 4.4 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.3%.

Is there a patch available for CVE-2020-0553?

Yes, a patch is available for CVE-2020-0553. Update the affected software to the latest version immediately.

Ac 3165 Firmware CVE-2020-0553

MEDIUM

Out-of-bounds Read (CWE-125)

2020-08-13 secure@intel.com

Buffer Overflow Intel Microsoft Information Disclosure Ac 3165 Firmware Ac 3168 Firmware Ac 7265 Firmware Ac 8260 Firmware Ac 8265 Firmware Ac 9260 Firmware Ac 9461 Firmware Ac 9462 Firmware Ac 9560 Firmware Ax200 Firmware Ax201 Firmware

4.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.4 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Aug 13, 2020 - 04:15 nvd

MEDIUM 4.4

DescriptionNVD

Out-of-bounds read in kernel mode driver for some Intel(R) Wireless Bluetooth(R) products on Windows* 10, may allow a privileged user to potentially enable information disclosure via local access.

AnalysisAI

Out-of-bounds read in kernel mode driver for some Intel(R) Wireless Bluetooth(R) products on Windows* 10, may allow a privileged user to potentially enable information disclosure via local access. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity.

Technical ContextAI

This vulnerability is classified as Out-of-bounds Read (CWE-125), which allows attackers to read data from memory outside the intended buffer boundaries. Out-of-bounds read in kernel mode driver for some Intel(R) Wireless Bluetooth(R) products on Windows* 10, may allow a privileged user to potentially enable information disclosure via local access. Affected products include: Intel Ac 3165 Firmware, Intel Ac 3168 Firmware, Intel Ac 7265 Firmware, Intel Ac 8260 Firmware, Intel Ac 8265 Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Validate array indices and buffer lengths. Use memory-safe languages. Enable AddressSanitizer during testing.