Intel BIOS Advisory

Summary:

Potential security vulnerabilities in BIOS firmware for multiple Intel Platforms may allow escalation of privilege, denial of service and/or information disclosure.** **Intel is releasing BIOS updates to mitigate these potential vulnerabilities.

Vulnerability Details:

CVEID: CVE-2020-24457

Description: Logic error in BIOS firmware for 8th, 9th and 10th Generation Intel® Core™ Processors may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access.

CVSS Base Score: 7.6 High

CVSS Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CVEID: CVE-2020-0571

Description: Improper conditions check in BIOS firmware for 8th Generation Intel® Core™ Processors and Intel® Pentium® Silver Processor Series may allow an authenticated user to potentially enable information disclosure via local access.

CVSS Base Score: 5.5 Medium

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Products:

• 8th Generation Intel® Core™ Processor
• 9th Generation Intel® Core™ Processor
• 10th Generation Intel® Core™ i7 Processor
• Intel® Pentium® Silver Processor Series

Recommendations:

Intel recommends that users of above Intel® products update to the latest BIOS version provided by the system manufacturer that addresses these issues.__

Acknowledgements:

These issues were found internally by Intel.

Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are available.