CVE-2020-8703
Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a privileged user to potentially enable escalation of privilege via local access.
- Score
- CVSS 3.1 6.7 Medium
- Status
- Modified - secure@intel.com
- Published
- 2021-06-09
- Last modified
- 2024-08-04
- Weaknesses
- CWE-119
Affected products
- Converged Security And Manageability Engine (Intel)
- Cloud Backup (Netapp)
- Simatic Field Pg M5 Firmware (Siemens)
- Simatic Field Pg M6 Firmware (Siemens)
- Simatic Ipc427e Firmware (Siemens)
- Simatic Ipc477e Firmware (Siemens)
- Simatic Ipc477e Pro Firmware (Siemens)
- Simatic Ipc527g Firmware (Siemens)
- Simatic Ipc547g Firmware (Siemens)
- Simatic Ipc627e Firmware (Siemens)
- Simatic Ipc647e Firmware (Siemens)
- Simatic Ipc677e Firmware (Siemens)
- Simatic Ipc847e Firmware (Siemens)
- Simatic Itp1000 Firmware (Siemens)
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf
- https://security.netapp.com/advisory/ntap-20210611-0004/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00459.html
