Lucene search

PRIOn knowledge basePRION:CVE-2020-8755

HistoryNov 12, 2020 - 6:15 p.m.

Race condition

2020-11-1218:15:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

6.6 Medium

AI Score

Confidence

High

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

40.5%

JSON

Race condition in subsystem for Intel® CSME versions before 12.0.70 and 14.0.45, Intel® SPS versions before E5_04.01.04.400 and E3_05.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

CPENameOperatorVersion
converged_security_and_management_enginege14.0.0
converged_security_and_management_enginelt14.0.45
converged_security_and_management_enginelt12.0.70
server_platform_serviceseq< e5-4.1.4.400
server_platform_serviceseq< e3-5.1.4.200

Name	Operator	Version
converged_security_and_management_engine	ge	14.0.0
converged_security_and_management_engine	lt	14.0.45
converged_security_and_management_engine	lt	12.0.70
server_platform_services	eq	< e5-4.1.4.400
server_platform_services	eq	< e3-5.1.4.200

References

security.netapp.com/advisory/ntap-20201113-0002/

security.netapp.com/advisory/ntap-20201113-0004/

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391

6.4 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

6.6 Medium

AI Score

Confidence

High

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

40.5%

JSON

Related for PRION:CVE-2020-8755