VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 12, 2020· Updated Aug 4, 2024

CVE-2020-8705

CVE-2020-8705

Description

Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 3.1.80 and 4.0.30, Intel(R) SPS versions before E5_04.01.04.400, E3_04.01.04.200, SoC-X_04.00.04.200 and SoC-A_04.00.04.300 may allow an unauthenticated user to potentially enable escalation of privileges via physical access.

Affected products

4
  • Intel(R)/CSMEdescription
  • Intel/TXEllm-fuzzy
    Range: before 3.1.80 and 4.0.30
  • Intel/CSMEllm-fuzzy
    Range: before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45, 14.5.25
  • Intel/SPSllm-fuzzy
    Range: before E5_04.01.04.400, E3_04.01.04.200, SoC-X_04.00.04.200, SoC-A_04.00.04.300

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.