CVE-2020-12357
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
- Score
- CVSS 3.1 6.7 Medium
- Status
- Modified - secure@intel.com
- Published
- 2021-06-09
- Last modified
- 2026-10-08
- Weaknesses
- CWE-665
Affected products
- Bios (Intel)
- Aff Bios (Netapp)
- Cloud Backup (Netapp)
- E-series Bios (Netapp)
- Fas Bios (Netapp)
- Hci Compute Node Bios (Netapp)
- Hci Storage Node Bios (Netapp)
- Solidfire Bios (Netapp)
- Simatic Cpu 1518-4 Firmware (Siemens)
- Simatic Field Pg M6 Firmware (Siemens)
- Simatic Ipc427e Firmware (Siemens)
- Simatic Ipc477e Firmware (Siemens)
- Simatic Ipc477e Pro Firmware (Siemens)
- Simatic Ipc547g Firmware (Siemens)
- Simatic Ipc627e Firmware (Siemens)
- Simatic Ipc647e Firmware (Siemens)
- Simatic Ipc677e Firmware (Siemens)
- Simatic Ipc847e Firmware (Siemens)
- Simatic Itp1000 Firmware (Siemens)
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html
- https://security.netapp.com/advisory/ntap-20210702-0002/
- https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf
