CVE-2020-8670 — Race Condition in Siemens Simatic Ipc627e Firmware

CWE-362 — Race Condition3 documents3 sources

Severity

6.4MEDIUMNVD

EPSS

0.1%

top 82.83%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Siemens Simatic Ipc627e Firmware Siemens Simatic Ipc647e Firmware Siemens Simatic Ipc677e Firmware +1 more

Timeline

PublishedJun 9

Latest updateMay 24

Description

Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.5 | Impact: 5.9

Affected Packages4 packages

▶NVDsiemens/simatic_ipc627e_firmware< 25.02.10

▶NVDsiemens/simatic_ipc647e_firmware< 25.02.10

▶NVDsiemens/simatic_ipc677e_firmware< 25.02.10

▶NVDsiemens/simatic_ipc847e_firmware< 25.02.10

🔴Vulnerability Details

GHSA

GHSA-4282-5w9g-6q57: Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access↗2022-05-24

▶

CVEList

CVE-2020-8670: Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access↗2021-06-09

▶