CVE-2020-12338

CRITICAL

Insufficient control flow management in the Open WebRTC Toolkit before version 4.3.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Affects 1 product across 1 vendor.

CVSS 3.19.8
EPSS1.6%
Percentile75th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
◆ AI Analysis — automated analysis, not human-reviewed

A critical vulnerability in the Open WebRTC Toolkit before version 4.3.1 allows unauthenticated users to potentially escalate privileges through network access due to insufficient control flow management.

BSID: BS-2020-GLOBAL-144568-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2020-12338?
A critical vulnerability in the Open WebRTC Toolkit before version 4.3.1 allows unauthenticated users to potentially escalate privileges through network access due to insufficient control flow management.
What is the CVSS score for CVE-2020-12338?
CVE-2020-12338 has CVSS 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 1.6%.
Is CVE-2020-12338 actively exploited?
No confirmed active exploitation of CVE-2020-12338 as of 2026-09-25.
How do I remediate CVE-2020-12338?
Priority: IMMEDIATE. PSIRT: [email protected]
What systems are affected by CVE-2020-12338?
CVE-2020-12338 affects Intel Open Webrtc Toolkit.
Vulnerability Details
CVE IDCVE-2020-12338
BSIDBS-2020-GLOBAL-144568-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2020-11-13
Last Modified2026-06-17
ICS Relevance0%
SourceNVD
Official Description

Insufficient control flow management in the Open WebRTC Toolkit before version 4.3.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability arises from improper handling of control flow in the Open WebRTC Toolkit, which can be exploited by an attacker to gain unauthorized access and escalate privileges on the system.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductAffected Versions
Intel Open Webrtc Toolkit < 4.3.1
Remediation

No official vendor advisory link on record. See the CVE record →

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 2162 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hashf370e1a0082b0e44bd734483c1045142613e8009bd5212c65c7bab96ff084fcb7a684c96f4b34b3e4337fdd1982da202f10c3dcaceb603e05eae3fb498a6a9c9
Related CVEs affecting Intel
CVE-2000-0384 10.0 NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wiz... CVE-2007-1307 10.0 Unspecified vulnerability in Lenovo Intel PRO/1000 LAN adapter before Build 1... CVE-2024-22476 10.0 Improper input validation in some Intel(R) Neural Compressor software before ... CVE-2021-44228 10.0 Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2... CVE-2022-25899 9.8 Authentication bypass for the Open AMT Cloud Toolkit software maintained by I...
View all Intel CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →