Sign-up

ID

VAR-202008-0072


CVE

CVE-2020-0555


TITLE

plural Intel(R) Wireless Bluetooth(R) Product input verification vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2020-009529

DESCRIPTION

Improper input validation for some Intel(R) Wireless Bluetooth(R) products may allow an authenticated user to potentially enable escalation of privilege via local access. plural Intel(R) Wireless Bluetooth(R) The product contains an input verification vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. By executing a specially crafted program, an attacker could exploit this vulnerability to escalate privileges

Trust: 1.71

sources: NVD: CVE-2020-0555 // JVNDB: JVNDB-2020-009529 // VULMON: CVE-2020-0555

IOT TAXONOMY

category:['network device']sub_category:bluetooth device

Trust: 0.1

sources: OTHER: None

AFFECTED PRODUCTS

vendor:intelmodel:ax200scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ac 8265scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ac 9560scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ac 9260scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ac 7265scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ax201scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ac 3168scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ac 9461scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ac 3165scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ac 8260scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ac 9462scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ac 3165scope: - version: -

Trust: 0.8

vendor:intelmodel:ac 3168scope: - version: -

Trust: 0.8

vendor:intelmodel:ac 7265scope: - version: -

Trust: 0.8

vendor:intelmodel:ac 8260scope: - version: -

Trust: 0.8

vendor:intelmodel:ac 8265scope: - version: -

Trust: 0.8

vendor:intelmodel:ac 9260scope: - version: -

Trust: 0.8

vendor:intelmodel:ac 9461scope: - version: -

Trust: 0.8

vendor:intelmodel:ac 9462scope: - version: -

Trust: 0.8

vendor:intelmodel:ac 9560scope: - version: -

Trust: 0.8

vendor:intelmodel:ax200scope: - version: -

Trust: 0.8

vendor:intelmodel:ax201scope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2020-009529 // NVD: CVE-2020-0555

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2020-0555
value: HIGH

Trust: 1.0

NVD: JVNDB-2020-009529
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202008-614
value: HIGH

Trust: 0.6

VULMON: CVE-2020-0555
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2020-0555
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.1

NVD: JVNDB-2020-009529
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

nvd@nist.gov: CVE-2020-0555
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 1.0

NVD: JVNDB-2020-009529
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULMON: CVE-2020-0555 // JVNDB: JVNDB-2020-009529 // CNNVD: CNNVD-202008-614 // NVD: CVE-2020-0555

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.8

sources: JVNDB: JVNDB-2020-009529 // NVD: CVE-2020-0555

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202008-614

TYPE

input validation error

Trust: 0.6

sources: CNNVD: CNNVD-202008-614

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2020-009529

PATCH
title:INTEL-SA-00337url:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00337.html
Trust: 0.8
title:Multiple Intel Product security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=126223
Trust: 0.6
title:HP: HPSBHF03679 rev. 1 - Intel® Wireless Bluetooth August 2020 Security Updatesurl:https://vulmon.com/vendoradvisory?qidtp=hp_bulletin&qid=HPSBHF03679
Trust: 0.1
title:CVE-Flowurl:https://github.com/404notf0und/CVE-Flow 
Trust: 0.1
sources:
            
            
            VULMON: CVE-2020-0555 // 
            
            
            
            JVNDB: JVNDB-2020-009529 // 
            
            
            
            CNNVD: CNNVD-202008-614

EXTERNAL IDS
db:NVDid:CVE-2020-0555
Trust: 2.6
db:JVNid:JVNVU99606488
Trust: 0.8
db:JVNDBid:JVNDB-2020-009529
Trust: 0.8
db:AUSCERTid:ESB-2020.2763
Trust: 0.6
db:CNNVDid:CNNVD-202008-614
Trust: 0.6
db:OTHERid:NONE
Trust: 0.1
db:VULMONid:CVE-2020-0555
Trust: 0.1
sources:
            
            
            OTHER: None // 
            
            
            
            VULMON: CVE-2020-0555 // 
            
            
            
            JVNDB: JVNDB-2020-009529 // 
            
            
            
            CNNVD: CNNVD-202008-614 // 
            
            
            
            NVD: CVE-2020-0555

REFERENCES
url:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00337.html
Trust: 1.7
url:https://nvd.nist.gov/vuln/detail/cve-2020-0555
Trust: 1.4
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-0555
Trust: 0.8
url:https://jvn.jp/vu/jvnvu99606488/
Trust: 0.8
url:https://www.auscert.org.au/bulletins/esb-2020.2763/
Trust: 0.6
url:https://ieeexplore.ieee.org/abstract/document/10769424
Trust: 0.1
url:https://cwe.mitre.org/data/definitions/20.html
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/186533
Trust: 0.1
url:https://github.com/404notf0und/cve-flow
Trust: 0.1
sources:
            
            
            OTHER: None // 
            
            
            
            VULMON: CVE-2020-0555 // 
            
            
            
            JVNDB: JVNDB-2020-009529 // 
            
            
            
            CNNVD: CNNVD-202008-614 // 
            
            
            
            NVD: CVE-2020-0555

SOURCES
db:OTHERid: - 
db:VULMONid:CVE-2020-0555
db:JVNDBid:JVNDB-2020-009529
db:CNNVDid:CNNVD-202008-614
db:NVDid:CVE-2020-0555

LAST UPDATE DATE
2025-01-30T21:39:46.443000+00:00

SOURCES UPDATE DATE
db:VULMONid:CVE-2020-0555date:2020-08-19T00:00:00
db:JVNDBid:JVNDB-2020-009529date:2020-11-10T08:48:40
db:CNNVDid:CNNVD-202008-614date:2021-01-05T00:00:00
db:NVDid:CVE-2020-0555date:2024-11-21T04:53:45.110

SOURCES RELEASE DATE
db:VULMONid:CVE-2020-0555date:2020-08-13T00:00:00
db:JVNDBid:JVNDB-2020-009529date:2020-11-10T08:48:40
db:CNNVDid:CNNVD-202008-614date:2020-08-11T00:00:00
db:NVDid:CVE-2020-0555date:2020-08-13T04:15:12.850