Lucene search

[email protected]CVE-2020-0599

HistoryNov 13, 2020 - 8:15 p.m.

CVE-2020-0599

2020-11-1320:15:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2020-0599

nvd

intel

processors

access control

privilege escalation

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

12.3%

JSON

Improper access control in the PMC for some Intel® Processors may allow a privileged user to potentially enable escalation of privilege via local access.

CPENameOperatorVersion
intel:pentium_j6425_firmwareintel pentium j6425 firmwareeq-
intel:pentium_j4205_firmwareintel pentium j4205 firmwareeq-
intel:pentium_j3710_firmwareintel pentium j3710 firmwareeq-
intel:pentium_j2900_firmwareintel pentium j2900 firmwareeq-
intel:pentium_j2850_firmwareintel pentium j2850 firmwareeq-
intel:pentium_n6415_firmwareintel pentium n6415 firmwareeq-
intel:pentium_n4200e_firmwareintel pentium n4200e firmwareeq-
intel:pentium_n4200_firmwareintel pentium n4200 firmwareeq-
intel:pentium_n3540_firmwareintel pentium n3540 firmwareeq-
intel:pentium_n3530_firmwareintel pentium n3530 firmwareeq-

CPE	Name	Operator	Version
intel:pentium_j6425_firmware	intel pentium j6425 firmware	eq	-
intel:pentium_j4205_firmware	intel pentium j4205 firmware	eq	-
intel:pentium_j3710_firmware	intel pentium j3710 firmware	eq	-
intel:pentium_j2900_firmware	intel pentium j2900 firmware	eq	-
intel:pentium_j2850_firmware	intel pentium j2850 firmware	eq	-
intel:pentium_n6415_firmware	intel pentium n6415 firmware	eq	-
intel:pentium_n4200e_firmware	intel pentium n4200e firmware	eq	-
intel:pentium_n4200_firmware	intel pentium n4200 firmware	eq	-
intel:pentium_n3540_firmware	intel pentium n3540 firmware	eq	-
intel:pentium_n3530_firmware	intel pentium n3530 firmware	eq	-

Rows per page:

1-10 of 611

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00360

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

12.3%

JSON

Related for CVE-2020-0599

cvelist1 f51 intel1 prion1 lenovo1 hp1