CVE-2020-8705

CWE-11883 documents3 sources

Severity

6.8MEDIUM

EPSS

0.7%

top 27.46%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Converged Security AND Manageability Engine Intel Server Platform Services Intel Trusted Execution Technology

Timeline

PublishedNov 12

Latest updateMay 24

Description

Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 3.1.80 and 4.0.30, Intel(R) SPS versions before E5_04.01.04.400, E3_04.01.04.200, SoC-X_04.00.04.200 and SoC-A_04.00.04.300 may allow an unauthenticated user to potentially enable escalation of privileges via physical access.

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 0.9 | Impact: 5.9

Affected Packages3 packages

▶NVDintel/converged_security_and_manageability_engine11.12.0 — 11.12.80+6

▶NVDintel/server_platform_services4 versions+3

▶NVDintel/trusted_execution_technology3.1.80, 4.0.30+1

🔴Vulnerability Details

GHSA

GHSA-xpc3-gf76-6g72: Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11↗2022-05-24

▶

CVEList

CVE-2020-8705: Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11↗2020-11-12

▶