CVE-2020-0590

CWE-20 — Improper Input Validation3 documents3 sources
Severity
7.8HIGH
EPSS
0.3%
top 42.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Siemens Simatic Ipc527g FirmwareSiemens Simatic Ipc547g FirmwareSiemens Simatic Ipc627e Firmware+3 more
Timeline
PublishedNov 12
Latest updateMay 24

Description

Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages7 packages

▶CVEListV5intel(r)_processorsSee references

Patches

Patch: cert-portal.siemens.com ↗Patch: cert-portal.siemens.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-fg7f-6665-fgmq: Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege↗2022-05-24
▶
CVEList
CVE-2020-0590: Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege↗2020-11-12
▶
CVE-2020-0590 (HIGH CVSS 7.8) | Improper input validation in BIOS f | cvebase.io