K52285493 : Multiple Intel CPU vulnerabilities

Security Advisory Description

• CVE-2020-8670

Race condition in the firmware for some Intel® Processors may allow a privileged user to potentially enable escalation of privilege via local access.

• CVE-2020-8700

Improper input validation in the firmware for some Intel® Processors may allow a privileged user to potentially enable escalation of privilege via local access.

• CVE-2020-12357

Improper initialization in the firmware for some Intel® Processors may allow a privileged user to potentially enable escalation of privilege via local access.

• CVE-2020-12358

Out of bounds write in the firmware for some Intel® Processors may allow a privileged user to potentially enable denial of service via local access.

• CVE-2020-12359

Insufficient control flow management in the firmware for some Intel® Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

• CVE-2020-12360

Out of bounds read in the firmware for some Intel® Processors may allow an authenticated user to potentially enable escalation of privilege via local access.

• CVE-2020-24486

Improper input validation in the firmware for some Intel® Processors may allow an authenticated user to potentially enable denial of service via local access.

• CVE-2021-0095

Improper initialization in the firmware for some Intel® Processors may allow a privileged user to potentially enable a denial of service via local access.

Impact

There is no impact; F5 products are not affected by this vulnerability.