CVE-2020-8671
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
Percentile
12.6%
Insufficient control flow management in BIOS firmware 8th, 9th Generation Intel® Core™ Processors and Intel® Celeron® Processor 4000 Series may allow an authenticated user to potentially enable information disclosure via local access.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| intel | celeron_4205u | - | cpe:2.3:h:intel:celeron_4205u:-:*:*:*:*:*:*:* |
| intel | celeron_4305u | - | cpe:2.3:h:intel:celeron_4305u:-:*:*:*:*:*:*:* |
| intel | celeron_4305ue | - | cpe:2.3:h:intel:celeron_4305ue:-:*:*:*:*:*:*:* |
| intel | core_i3_8100 | - | cpe:2.3:h:intel:core_i3_8100:-:*:*:*:*:*:*:* |
| intel | core_i3_8100f | - | cpe:2.3:h:intel:core_i3_8100f:-:*:*:*:*:*:*:* |
| intel | core_i3_8100t | - | cpe:2.3:h:intel:core_i3_8100t:-:*:*:*:*:*:*:* |
| intel | core_i3_8300 | - | cpe:2.3:h:intel:core_i3_8300:-:*:*:*:*:*:*:* |
| intel | core_i3_8300t | - | cpe:2.3:h:intel:core_i3_8300t:-:*:*:*:*:*:*:* |
| intel | core_i3_8350k | - | cpe:2.3:h:intel:core_i3_8350k:-:*:*:*:*:*:*:* |
| intel | core_i3_9100 | - | cpe:2.3:h:intel:core_i3_9100:-:*:*:*:*:*:*:* |
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
Percentile
12.6%