Lucene search

K
lenovoLenovoLENOVO:PS500385-INTEL-BIOS-PLATFORM-SAMPLE-CODE-ADVISORY-NOSID
HistoryNov 14, 2020 - 2:38 a.m.

Intel BIOS Platform Sample Code Advisory - Lenovo Support NL

2020-11-1402:38:04
support.lenovo.com
48

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

**Lenovo Security Advisory:**LEN-50824

**Potential Impact:**Escalation of privilege

**Severity:**High

**Scope of Impact:**Industry-wide

**CVE Identifier:**CVE-2020-8738, CVE-2020-8739, CVE-2020-8740, CVE-2020-8764

Summary Description:

Intel reported potential security vulnerabilities in Intel BIOS platform sample code for some Intelยฎ Processors that may allow escalation of privilege.

Mitigation Strategy for Customers (what you should do to protect yourself):

Intel recommends updating system firmware to the version (or newer) indicated for your model in the Product Impact section.


6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

Related for LENOVO:PS500385-INTEL-BIOS-PLATFORM-SAMPLE-CODE-ADVISORY-NOSID