← Back to CVE List
Vulnerability Intelligence Report

CVE-2020-12653

An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea.

No Active Exploit Signals
CVSS Base Score
7.8
HIGH
EPSS Probability:0.43%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
Authentication
Weaponization
SSVC Action

Affected Products & Versions

Vendor Product Affected Versions
linux linux_kernel all
opensuse leap 15.1
debian debian_linux 8.0, 9.0
netapp active_iq_unified_manager all
netapp cloud_backup all
netapp element_software all
netapp hci_management_node all
netapp solidfire all
netapp steelstore_cloud_integrated_storage all
netapp hci_compute_node_firmware all
netapp hci_compute_node all
netapp a700s_firmware all
netapp a700s all
netapp h300s_firmware all
netapp h300s all
netapp h500s_firmware all
netapp h500s all
netapp h700s_firmware all
netapp h700s all
netapp h300e_firmware all
netapp h300e all
netapp h500e_firmware all
netapp h500e all
netapp h700e_firmware all
netapp h700e all
netapp h410s_firmware all
netapp h410s all
netapp h410c_firmware all
netapp h410c all
netapp h610c_firmware all
netapp h610c all
netapp h610s_firmware all
netapp h610s all
netapp h615c_firmware all
netapp h615c all

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

EPSS Score
0.435%

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityMITRE Corporation · N/A · USA
Reserved2020-05-05T00:00:00
Published2020-05-05T04:47:35
Last Updated2024-08-04T12:04:22

LINK COPIED TO CLIPBOARD