CVE-2020-8705

published 2020-11-12

CVE-2020-8705: Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10…

Priority P4 29 medium 6.8 CVSS 3.1

AV P AC L PR N UI N S U C H I H A H

Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 3.1.80 and 4.0.30, Intel(R) SPS versions before E5_04.01.04.400, E3_04.01.04.200, SoC-X_04.00.04.200 and SoC-A_04.00.04.300 may allow an unauthenticated user to potentially enable escalation of privileges via physical access.

Affected

13 ranges

Vendor	Product	Version range	Fixed in
intel	converged_security_and_manageability_engine	< 11.8.80	11.8.80
intel	converged_security_and_manageability_engine	>= 11.12.0 < 11.12.80	11.12.80
intel	converged_security_and_manageability_engine	>= 11.22.0 < 11.22.80	11.22.80
intel	converged_security_and_manageability_engine	>= 12.0 < 12.0.70	12.0.70
intel	converged_security_and_manageability_engine	>= 13.0 < 13.0.40	13.0.40
intel	converged_security_and_manageability_engine	>= 13.30.0 < 13.30.10	13.30.10
intel	converged_security_and_manageability_engine	>= 14.0 < 14.0.45	14.0.45
intel	server_platform_services	—	—
intel	server_platform_services	—	—
intel	server_platform_services	—	—
intel	server_platform_services	—	—
intel	trusted_execution_technology	—	—
intel	trusted_execution_technology	—	—

CVSS provenance

nvd v3.1 6.8 MEDIUM CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 4.6 MEDIUM AV:L/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-1188