Lucene search

[email protected]NVD:CVE-2020-8738

HistoryNov 12, 2020 - 6:15 p.m.

CVE-2020-8738

2020-11-1218:15:16

CWE-754

[email protected]

web.nvd.nist.gov

intel bios platform

processors

privileged user

escalation of privilege

local access

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

12.6%

JSON

Improper conditions check in Intel BIOS platform sample code for some Intel® Processors before may allow a privileged user to potentially enable escalation of privilege via local access.

Affected configurations

Nvd

Node

intelcore_i5-7640xMatch-

intelcore_i7-3820Match-

intelcore_i7-3920xmMatch-

intelcore_i7-3930kMatch-

intelcore_i7-3940xmMatch-

intelcore_i7-3960xMatch-

intelcore_i7-3970xMatch-

intelcore_i7-4820kMatch-

intelcore_i7-4930kMatch-

intelcore_i7-4930mxMatch-

intelcore_i7-4940mxMatch-

intelcore_i7-4960xMatch-

intelcore_i7-5820kMatch-

intelcore_i7-5930kMatch-

intelcore_i7-5960xMatch-

intelcore_i7-6800kMatch-

intelcore_i7-6850kMatch-

intelcore_i7-6900kMatch-

intelcore_i7-6950xMatch-

intelcore_i7-7740xMatch-

intelcore_i7-7800xMatch-

intelcore_i7-7820xMatch-

intelcore_i7-9800xMatch-

intelcore_i9-10900xMatch-

intelcore_i9-10920xMatch-

intelcore_i9-10940xMatch-

intelcore_i9-10980xeMatch-

intelcore_i9-7900xMatch-

intelcore_i9-7920xMatch-

intelcore_i9-7940xMatch-

intelcore_i9-7960xMatch-

intelcore_i9-7980xeMatch-

intelcore_i9-9820xMatch-

intelcore_i9-9900xMatch-

intelcore_i9-9920xMatch-

intelcore_i9-9940xMatch-

intelcore_i9-9960xMatch-

intelcore_i9-9980xeMatch-

intelxeon_bronze_3104Match-

intelxeon_bronze_3106Match-

intelxeon_bronze_3204Match-

intelxeon_bronze_3206rMatch-

intelxeon_gold_5115Match-

intelxeon_gold_5118Match-

intelxeon_gold_5119tMatch-

intelxeon_gold_5120Match-

intelxeon_gold_5120tMatch-

intelxeon_gold_5122Match-

intelxeon_gold_5215Match-

intelxeon_gold_5215lMatch-

intelxeon_gold_5217Match-

intelxeon_gold_5218Match-

intelxeon_gold_5218bMatch-

intelxeon_gold_5218nMatch-

intelxeon_gold_5218rMatch-

intelxeon_gold_5218tMatch-

intelxeon_gold_5220Match-

intelxeon_gold_5220rMatch-

intelxeon_gold_5220sMatch-

intelxeon_gold_5220tMatch-

intelxeon_gold_5222Match-

intelxeon_gold_6126Match-

intelxeon_gold_6126fMatch-

intelxeon_gold_6126tMatch-

intelxeon_gold_6128Match-

intelxeon_gold_6130Match-

intelxeon_gold_6130fMatch-

intelxeon_gold_6130tMatch-

intelxeon_gold_6132Match-

intelxeon_gold_6134Match-

intelxeon_gold_6136Match-

intelxeon_gold_6138Match-

intelxeon_gold_6138fMatch-

intelxeon_gold_6138pMatch-

intelxeon_gold_6138tMatch-

intelxeon_gold_6140Match-

intelxeon_gold_6142Match-

intelxeon_gold_6142fMatch-

intelxeon_gold_6144Match-

intelxeon_gold_6146Match-

intelxeon_gold_6148Match-

intelxeon_gold_6148fMatch-

intelxeon_gold_6150Match-

intelxeon_gold_6152Match-

intelxeon_gold_6154Match-

intelxeon_gold_6208uMatch-

intelxeon_gold_6209uMatch-

intelxeon_gold_6210uMatch-

intelxeon_gold_6212uMatch-

intelxeon_gold_6222vMatch-

intelxeon_gold_6226Match-

intelxeon_gold_6226rMatch-

intelxeon_gold_6230Match-

intelxeon_gold_6230nMatch-

intelxeon_gold_6230rMatch-

intelxeon_gold_6230tMatch-

intelxeon_gold_6234Match-

intelxeon_gold_6238Match-

intelxeon_gold_6238lMatch-

intelxeon_gold_6238rMatch-

intelxeon_platinum_8153Match-

intelxeon_platinum_8156Match-

intelxeon_platinum_8158Match-

intelxeon_platinum_8160Match-

intelxeon_platinum_8160fMatch-

intelxeon_platinum_8160tMatch-

intelxeon_platinum_8164Match-

intelxeon_platinum_8168Match-

intelxeon_platinum_8170Match-

intelxeon_platinum_8176Match-

intelxeon_platinum_8176fMatch-

intelxeon_platinum_8180Match-

intelxeon_silver_4108Match-

intelxeon_silver_4109tMatch-

intelxeon_silver_4110Match-

intelxeon_silver_4112Match-

intelxeon_silver_4114Match-

intelxeon_silver_4114tMatch-

intelxeon_silver_4116Match-

intelxeon_silver_4116tMatch-

intelxeon_silver_4208Match-

intelxeon_silver_4209tMatch-

intelxeon_silver_4210Match-

intelxeon_silver_4210rMatch-

intelxeon_silver_4210tMatch-

intelxeon_silver_4214Match-

intelxeon_silver_4214rMatch-

intelxeon_silver_4214yMatch-

intelxeon_silver_4215Match-

intelxeon_silver_4215rMatch-

intelxeon_silver_4216Match-

intelxeon_w-10855mMatch-

intelxeon_w-10885mMatch-

intelxeon_w-1250Match-

intelxeon_w-1250eMatch-

intelxeon_w-1250pMatch-

intelxeon_w-1250teMatch-

intelxeon_w-1270Match-

intelxeon_w-1270eMatch-

intelxeon_w-1270pMatch-

intelxeon_w-1270teMatch-

intelxeon_w-1290Match-

intelxeon_w-1290eMatch-

intelxeon_w-1290pMatch-

intelxeon_w-1290tMatch-

intelxeon_w-1290teMatch-

intelxeon_w-2123Match-

intelxeon_w-2125Match-

intelxeon_w-2133Match-

intelxeon_w-2135Match-

intelxeon_w-2145Match-

intelxeon_w-2155Match-

intelxeon_w-2175Match-

intelxeon_w-2195Match-

intelxeon_w-2223Match-

intelxeon_w-2225Match-

intelxeon_w-2235Match-

intelxeon_w-2245Match-

intelxeon_w-2255Match-

intelxeon_w-2265Match-

intelxeon_w-2275Match-

intelxeon_w-2295Match-

intelxeon_w-3175xMatch-

intelxeon_w-3223Match-

intelxeon_w-3225Match-

intelxeon_w-3235Match-

intelxeon_w-3245Match-

intelxeon_w-3245mMatch-

intelxeon_w-3265Match-

intelxeon_w-3265mMatch-

intelxeon_w-3275Match-

intelxeon_w-3275mMatch-

AND

intelbiosMatch-

Node

intelxeon_d-1513nMatch-

intelxeon_d-1518Match-

intelxeon_d-1520Match-

intelxeon_d-1521Match-

intelxeon_d-1523nMatch-

intelxeon_d-1527Match-

intelxeon_d-1528Match-

intelxeon_d-1529Match-

intelxeon_d-1531Match-

intelxeon_d-1533nMatch-

intelxeon_d-1537Match-

intelxeon_d-1539Match-

intelxeon_d-1540Match-

intelxeon_d-1541Match-

intelxeon_d-1543nMatch-

intelxeon_d-1548Match-

intelxeon_d-1553nMatch-

intelxeon_d-1557Match-

intelxeon_d-1559Match-

intelxeon_d-1567Match-

intelxeon_d-1571Match-

intelxeon_d-1577Match-

intelxeon_d-1602Match-

intelxeon_d-1622Match-

intelxeon_d-1623nMatch-

intelxeon_d-1627Match-

intelxeon_d-1633nMatch-

intelxeon_d-1637Match-

intelxeon_d-1649nMatch-

intelxeon_d-1653nMatch-

intelxeon_d-2123itMatch-

intelxeon_d-2141iMatch-

intelxeon_d-2142itMatch-

intelxeon_d-2143itMatch-

intelxeon_d-2145ntMatch-

intelxeon_d-2146ntMatch-

intelxeon_d-2161iMatch-

intelxeon_d-2163itMatch-

intelxeon_d-2166ntMatch-

intelxeon_d-2173itMatch-

intelxeon_d-2177ntMatch-

intelxeon_d-2183itMatch-

intelxeon_d-2187ntMatch-

intelxeon_e5-1428l_v3Match-

intelxeon_e5-1620_v3Match-

intelxeon_e5-1620_v4Match-

intelxeon_e5-1630_v3Match-

intelxeon_e5-1630_v4Match-

intelxeon_e5-1650_v3Match-

intelxeon_e5-1650_v4Match-

intelxeon_e5-1660_v3Match-

intelxeon_e5-1660_v4Match-

intelxeon_e5-1680_v3Match-

intelxeon_e5-1680_v4Match-

intelxeon_e5-2408l_v3Match-

intelxeon_e5-2418l_v3Match-

intelxeon_e5-2428l_v3Match-

intelxeon_e5-2438l_v3Match-

intelxeon_e5-2603_v3Match-

intelxeon_e5-2603_v4Match-

intelxeon_e5-2608l_v3Match-

intelxeon_e5-2608l_v4Match-

intelxeon_e5-2609_v3Match-

intelxeon_e5-2609_v4Match-

intelxeon_e5-2618l_v3Match-

intelxeon_e5-2618l_v4Match-

intelxeon_e5-2620_v3Match-

intelxeon_e5-2620_v4Match-

intelxeon_e5-2623_v3Match-

intelxeon_e5-2623_v4Match-

intelxeon_e5-2628l_v3Match-

intelxeon_e5-2628l_v4Match-

intelxeon_e5-2630_v3Match-

intelxeon_e5-2630_v4Match-

intelxeon_e5-2630l_v3Match-

intelxeon_e5-2630l_v4Match-

intelxeon_e5-2637_v3Match-

intelxeon_e5-2637_v4Match-

intelxeon_e5-2640_v3Match-

intelxeon_e5-2640_v4Match-

intelxeon_e5-2643_v3Match-

intelxeon_e5-2643_v4Match-

intelxeon_e5-2648l_v3Match-

intelxeon_e5-2648l_v4Match-

intelxeon_e5-2650_v3Match-

intelxeon_e5-2650_v4Match-

intelxeon_e5-2650l_v3Match-

intelxeon_e5-2650l_v4Match-

intelxeon_e5-2658_v3Match-

intelxeon_e5-2658_v4Match-

intelxeon_e5-2658a_v3Match-

intelxeon_e5-2660_v3Match-

intelxeon_e5-2660_v4Match-

intelxeon_e5-2667_v3Match-

intelxeon_e5-2667_v4Match-

intelxeon_e5-2670_v3Match-

intelxeon_e5-2680_v3Match-

intelxeon_e5-2680_v4Match-

intelxeon_e5-2683_v3Match-

intelxeon_e5-2683_v4Match-

intelxeon_e5-2687w_v3Match-

intelxeon_e5-2687w_v4Match-

intelxeon_e5-2690_v3Match-

intelxeon_e5-2690_v4Match-

intelxeon_e5-2695_v3Match-

intelxeon_e5-2695_v4Match-

intelxeon_e5-2697_v3Match-

intelxeon_e5-2697_v4Match-

intelxeon_e5-2697a_v4Match-

intelxeon_e5-2698_v3Match-

intelxeon_e5-2698_v4Match-

intelxeon_e5-2699_v3Match-

intelxeon_e5-2699_v4Match-

intelxeon_e5-2699a_v4Match-

intelxeon_e5-2699r_v4Match-

intelxeon_e5-4610_v3Match-

intelxeon_e5-4610_v4Match-

intelxeon_e5-4620_v3Match-

intelxeon_e5-4620_v4Match-

intelxeon_e5-4627_v3Match-

intelxeon_e5-4627_v4Match-

intelxeon_e5-4628l_v4Match-

intelxeon_e5-4640_v3Match-

intelxeon_e5-4640_v4Match-

intelxeon_e5-4648_v3Match-

intelxeon_e5-4650_v3Match-

intelxeon_e5-4650_v4Match-

intelxeon_e5-4655_v3Match-

intelxeon_e5-4655_v4Match-

intelxeon_e5-4660_v3Match-

intelxeon_e5-4660_v4Match-

intelxeon_e5-4667_v3Match-

intelxeon_e5-4667_v4Match-

intelxeon_e5-4669_v3Match-

intelxeon_e5-4669_v4Match-

intelxeon_e7-4809_v4Match-

intelxeon_e7-4820_v4Match-

intelxeon_e7-4830_v4Match-

intelxeon_e7-4850_v4Match-

intelxeon_e7-8860_v4Match-

intelxeon_e7-8867_v4Match-

intelxeon_e7-8870_v4Match-

intelxeon_e7-8880_v4Match-

intelxeon_e7-8890_v4Match-

intelxeon_e7-8891_v4Match-

intelxeon_e7-8893_v4Match-

intelxeon_e7-8894_v4Match-

AND

intelbiosMatch-

Node

intelbiosMatch-

AND

intelatom_c3308Match-

intelatom_c3336Match-

intelatom_c3338Match-

intelatom_c3338rMatch-

intelatom_c3436lMatch-

intelatom_c3508Match-

intelatom_c3538Match-

intelatom_c3558Match-

intelatom_c3558rMatch-

intelatom_c3708Match-

intelatom_c3750Match-

intelatom_c3758Match-

intelatom_c3758rMatch-

intelatom_c3808Match-

intelatom_c3830Match-

intelatom_c3850Match-

intelatom_c3858Match-

intelatom_c3950Match-

intelatom_c3955Match-

intelatom_c3958Match-

Node

netappcloud_backupMatch-

netappfas\/aff_biosMatch-

netapphci_compute_node_biosMatch-

netapphci_storage_node_biosMatch-

netappsolidfire_biosMatch-

References

security.netapp.com/advisory/ntap-20210122-0008/

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00390

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

12.6%

JSON

Related for NVD:CVE-2020-8738

cvelist1 prion1 cve1 intel1 lenovo1 f51 hp1