Vulnerability · Published Mar 12, 2020 · Assigned by intel
CVE-2020-0550
Medium 5.6
In plain English
A medium-severity security flaw in Snoop Assisted L1D Sampling Advisory from Intel. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).
Severity (CVSS NVD)5.6Medium
Exploit odds (30 days)0.3%top 73.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. The list of affected products is provided in intel-sa-00330: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00330.html
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Intel | Snoop Assisted L1D Sampling Advisory | See advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00330.html |
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00330.html x_refsource_CONFIRM
- https://security.netapp.com/advisory/ntap-20200320-0001/ x_refsource_CONFIRM