CVE-2020-8744

🗓️ 12 Nov 2020 18:06:17Reported by intelType

CVE-2020-8744: Improper initialization in Intel subsystem

Reporter	Title	Published	Views	Family All 16
Cvelist	CVE-2020-8744	12 Nov 202018:06	–	cvelist
EUVD	EUVD-2020-29592	7 Oct 202500:30	–	euvd
F5 Networks	K61095244: Intel software vulnerabilities CVE-2020-8705, CVE-2020-8744, CVE-2020-8745, CVE-2020-8756	21 Feb 202318:54	–	f5
Hewlett-Packard	HPSBHF03703 rev. 4 - Intel® 2020.2 IPU - CSME, SPS, TXE, AMT, and DAL Security Update	9 Nov 202000:00	–	hp
ICS	Siemens SIMATIC S7-1500	11 May 202100:00	–	ics
Intel	2020.2 IPU – Intel® CSME, SPS, TXE, and AMT Advisory	12 May 202200:00	–	intel
Tenable Nessus	Intel Active Management Technology (AMT) Multiple Vulnerabilities (INTEL-SA-00391) (remote check)	20 Nov 202000:00	–	nessus
Tenable Nessus	Siemens SIMATIC S7-1500 Improper Initialization (CVE-2020-8744)	7 Nov 202200:00	–	nessus
Tenable Nessus	Intel Converged Security Management Engine (CSME) Active Management Technology (AMT) Multiple Vulnerabilities (INTEL-SA-00391)	20 Nov 202000:00	–	nessus
NCSC	Multiple vulnerabilities fixed in Intel systems	13 Nov 202000:00	–	ncsc

NVD

Node

intel converged_security_and_management_engineRange<12.0.70

intel converged_security_and_management_engineRange13.0.0–13.0.40

intel converged_security_and_management_engineRange13.30.0–13.30.10

intel converged_security_and_management_engineRange14.0.0–14.0.45

intel converged_security_and_management_engineRange14.5.0–14.5.25

intel server_platform_servicesRange<e3_05.01.04.200

intel trusted_execution_engineRange<4.0.30

Node

siemens simatic_s7-1518-4_pn/dp_mfp_firmwareMatch-

AND

siemens simatic_s7-1518-4_pn/dp_mfpMatch-

Node

siemens simatic_s7-1518f-4_pn/dp_mfp_firmwareMatch-

AND

siemens simatic_s7-1518f-4_pn/dp_mfpMatch-

Node

siemens simatic_s7-1500_firmwareMatch-

AND

siemens simatic_s7-1500Match-

[
  {
    "product": "Intel(R) CSME versions, Intel(R) TXE, Intel(R) SPS",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Intel(R) CSME versions before 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions before E3_05.01.04.200"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20201113-0005/
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-501073.pdf
security	www.security.netapp.com/advisory/ntap-20201113-0004/
security	www.security.netapp.com/advisory/ntap-20201113-0002/
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391

21 Nov 2024 05:39Current

7.5High risk

Vulners AI Score7.5

CVSS 24.6

CVSS 3.17.8

EPSS0.0016

CWE-665