Vulnerability · Published Mar 12, 2020 · Assigned by intel
CVE-2020-0551
Medium 5.6
In plain English
A medium-severity security flaw in Intel(R) Processors Load Value Injection from Intel. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS NVD)5.6Medium
Exploit odds (30 days)1.1%top 34.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Public PoC
Official description
Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The list of affected products is provided in intel-sa-00334: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00334.html
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Intel | Intel(R) Processors Load Value Injection | See advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00334.html |
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00334.html x_refsource_CONFIRM
- https://security.netapp.com/advisory/ntap-20200320-0002/ x_refsource_CONFIRM