Medium severity6.4NVD Advisory· Published Nov 12, 2020· Updated Jun 17, 2026

CVE-2020-8755

Description

Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and E3_05.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Affected products

Intel/Converged Security And Management Engine
cpe:2.3:a:intel:converged_security_and_management_engine:*:*:*:*:*:*:*:*
Range: <12.0.70
Intel/Server Platform Services
cpe:2.3:a:intel:server_platform_services:*:*:*:*:*:*:*:*
Range: <e5_04.01.04.400
Intel/CSMEdescription
Intel/CSMEllm-fuzzy
Range: <12.0.70
Intel/SPSllm-fuzzy
Range: <E5_04.01.04.400

Patches

Vulnerability mechanics

References

security.netapp.com/advisory/ntap-20201113-0002/nvdThird Party Advisory
security.netapp.com/advisory/ntap-20201113-0004/nvdThird Party Advisory
www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.416
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000