{"id":"CVE-2020-24513","title":"Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.","summary":"Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","vendor":"intel","product":"atom_c3308","affected":["atom_c3308","atom_c3336","atom_c3338","atom_c3338r","atom_c3436l","atom_c3508","atom_c3538","atom_c3558","atom_c3558r","atom_c3558rc","atom_c3708","atom_c3750","atom_c3758","atom_c3758r","atom_c3808","atom_c3830","atom_c3850","atom_c3858","atom_c3950","atom_c3955","atom_c3958","atom_p5942b","atom_x5-a3930","atom_x5-a3940","atom_x5-a3950","atom_x5-a3960","atom_x6200fe","atom_x6211e","atom_x6212re","atom_x6413e","atom_x6425e","atom_x6425re","atom_x6427fe","celeron_j3355","celeron_j3355e","celeron_j3455","celeron_j3455e","celeron_j4005","celeron_j4025","celeron_j4105","celeron_j4125","celeron_j6413","celeron_n3350","celeron_n3350e","celeron_n3450","celeron_n4000","celeron_n4020","celeron_n4100","celeron_n4120","celeron_n6211","core_i3-l13g4","core_i5-l16g7","p5921b","p5931b","p5962b","pentium_j4205","pentium_j6425","pentium_n4200","pentium_n4200e","pentium_n6415","pentium_silver_j5005","pentium_silver_j5040","pentium_silver_n5000","pentium_silver_n5030","debian_linux = 9.0","debian_linux = 10.0","simatic_drive_controller_firmware","simatic_et_200sp_open_controller_firmware < 0209_0105","simatic_ipc127e_firmware < 21.01.07"],"patched":["simatic_et_200sp_open_controller_firmware 0209_0105","simatic_ipc127e_firmware 21.01.07"],"published":"2021-06-09","updated":"2026-10-08","sourceUpdated":"2026-10-08T21:17:25.873","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2020-24513","references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf","label":"secure@intel.com"},{"url":"https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html","label":"secure@intel.com"},{"url":"https://www.debian.org/security/2021/dsa-4934","label":"secure@intel.com"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html","label":"secure@intel.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2021/dsa-4934","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.00472,"epssPercentile":0.38802,"ingestedAt":"2026-10-08T22:11:53.734Z","slug":"CVE-2020-24513","body":"## Overview\n\nDomain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.\n\n## Affected\n\n- `atom_c3308`\n- `atom_c3336`\n- `atom_c3338`\n- `atom_c3338r`\n- `atom_c3436l`\n- `atom_c3508`\n- `atom_c3538`\n- `atom_c3558`\n- `atom_c3558r`\n- `atom_c3558rc`\n- `atom_c3708`\n- `atom_c3750`\n- `atom_c3758`\n- `atom_c3758r`\n- `atom_c3808`\n- `atom_c3830`\n- `atom_c3850`\n- `atom_c3858`\n- `atom_c3950`\n- `atom_c3955`\n- `atom_c3958`\n- `atom_p5942b`\n- `atom_x5-a3930`\n- `atom_x5-a3940`\n- `atom_x5-a3950`\n- `atom_x5-a3960`\n- `atom_x6200fe`\n- `atom_x6211e`\n- `atom_x6212re`\n- `atom_x6413e`\n- `atom_x6425e`\n- `atom_x6425re`\n- `atom_x6427fe`\n- `celeron_j3355`\n- `celeron_j3355e`\n- `celeron_j3455`\n- `celeron_j3455e`\n- `celeron_j4005`\n- `celeron_j4025`\n- `celeron_j4105`\n- `celeron_j4125`\n- `celeron_j6413`\n- `celeron_n3350`\n- `celeron_n3350e`\n- `celeron_n3450`\n- `celeron_n4000`\n- `celeron_n4020`\n- `celeron_n4100`\n- `celeron_n4120`\n- `celeron_n6211`\n- `core_i3-l13g4`\n- `core_i5-l16g7`\n- `p5921b`\n- `p5931b`\n- `p5962b`\n- `pentium_j4205`\n- `pentium_j6425`\n- `pentium_n4200`\n- `pentium_n4200e`\n- `pentium_n6415`\n- `pentium_silver_j5005`\n- `pentium_silver_j5040`\n- `pentium_silver_n5000`\n- `pentium_silver_n5030`\n- `debian_linux = 9.0`\n- `debian_linux = 10.0`\n- `simatic_drive_controller_firmware`\n- `simatic_et_200sp_open_controller_firmware < 0209_0105`\n- `simatic_ipc127e_firmware < 21.01.07`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `simatic_et_200sp_open_controller_firmware 0209_0105`\n- `simatic_ipc127e_firmware 21.01.07`","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}