CVE-2020-24513
Medium
Description
Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Intel Atom
PublishedJun 9, 2021
First seenJun 9, 2021
How to fix
Update
- siemens simatic_et_200sp_open_controller_firmware0209_0105 or later
- siemens simatic_ipc127e_firmware21.01.07 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel atom_c3308 | No range specified | — |
| intel atom_c3336 | No range specified | — |
| intel atom_c3338 | No range specified | — |
| intel atom_c3338r | No range specified | — |
| intel atom_c3436l | No range specified | — |
| intel atom_c3508 | No range specified | — |
| intel atom_c3538 | No range specified | — |
| intel atom_c3558 | No range specified | — |
| intel atom_c3558r | No range specified | — |
| intel atom_c3558rc | No range specified | — |
| intel atom_c3708 | No range specified | — |
| intel atom_c3750 | No range specified | — |
| intel atom_c3758 | No range specified | — |
| intel atom_c3758r | No range specified | — |
| intel atom_c3808 | No range specified | — |
| intel atom_c3830 | No range specified | — |
| intel atom_c3850 | No range specified | — |
| intel atom_c3858 | No range specified | — |
| intel atom_c3950 | No range specified | — |
| intel atom_c3955 | No range specified | — |
| intel atom_c3958 | No range specified | — |
| intel atom_p5942b | No range specified | — |
| intel atom_x5-a3930 | No range specified | — |
| intel atom_x5-a3940 | No range specified | — |
| intel atom_x5-a3950 | No range specified | — |
| intel atom_x5-a3960 | No range specified | — |
| intel atom_x6200fe | No range specified | — |
| intel atom_x6211e | No range specified | — |
| intel atom_x6212re | No range specified | — |
| intel atom_x6413e | No range specified | — |
| intel atom_x6425e | No range specified | — |
| intel atom_x6425re | No range specified | — |
| intel atom_x6427fe | No range specified | — |
| intel celeron_j3355 | No range specified | — |
| intel celeron_j3355e | No range specified | — |
| intel celeron_j3455 | No range specified | — |
| intel celeron_j3455e | No range specified | — |
| intel celeron_j4005 | No range specified | — |
| intel celeron_j4025 | No range specified | — |
| intel celeron_j4105 | No range specified | — |
| intel celeron_j4125 | No range specified | — |
| intel celeron_j6413 | No range specified | — |
| intel celeron_n3350 | No range specified | — |
| intel celeron_n3350e | No range specified | — |
| intel celeron_n3450 | No range specified | — |
| intel celeron_n4000 | No range specified | — |
| intel celeron_n4020 | No range specified | — |
| intel celeron_n4100 | No range specified | — |
| intel celeron_n4120 | No range specified | — |
| intel celeron_n6211 | No range specified | — |
| intel core_i3-l13g4 | No range specified | — |
| intel core_i5-l16g7 | No range specified | — |
| intel p5921b | No range specified | — |
| intel p5931b | No range specified | — |
| intel p5962b | No range specified | — |
| intel pentium_j4205 | No range specified | — |
| intel pentium_j6425 | No range specified | — |
| intel pentium_n4200 | No range specified | — |
| intel pentium_n4200e | No range specified | — |
| intel pentium_n6415 | No range specified | — |
| intel pentium_silver_j5005 | No range specified | — |
| intel pentium_silver_j5040 | No range specified | — |
| intel pentium_silver_n5000 | No range specified | — |
| intel pentium_silver_n5030 | No range specified | — |
| debian debian_linux | 9.0, 10.0 | — |
| siemens simatic_drive_controller_firmware | No range specified | — |
| siemens simatic_et_200sp_open_controller_firmware | v < 0209_0105 | 0209_0105 |
| siemens simatic_ipc127e_firmware | v < 21.01.07 | 21.01.07 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.