CVE-2020-8704
Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation of privilege via local access.
- Score
- CVSS 3.1 6.4 Medium
- Status
- Modified - secure@intel.com
- Published
- 2021-06-09
- Last modified
- 2024-08-04
- Weaknesses
- CWE-362
Affected products
- Local Manageability Service (Intel)
- Simatic Field Pg M5 Firmware (Siemens)
- Simatic Field Pg M6 Firmware (Siemens)
- Simatic Ipc427e Firmware (Siemens)
- Simatic Ipc477e Firmware (Siemens)
- Simatic Ipc477e Pro Firmware (Siemens)
- Simatic Ipc527g Firmware (Siemens)
- Simatic Ipc547g Firmware (Siemens)
- Simatic Ipc627e Firmware (Siemens)
- Simatic Ipc647e Firmware (Siemens)
- Simatic Ipc677e Firmware (Siemens)
- Simatic Ipc847e Firmware (Siemens)
- Simatic Itp1000 Firmware (Siemens)
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00459.html
