Vulnetix
Try Vulnetix Request Demo
CVE-2020-8705 PUBLISHED CVSS 6.800000190734863 MEDIUM

Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 3.1.80 and 4.0.30, Intel(R) SPS versions before E5_04.01.04.400, E3_04.01.04.200, SoC-X_04.00.04.200 and SoC-A_04.00.04.300 may allow an unauthenticated user to potentially enable escalation of privileges via physical access.

EPSS 0.72% · 72.4th percentile

Risk Scores

CVSS v3.1
6.800000190734863
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.72%
72.4th percentile

Affected Products

VendorProductVersions
n/aIntel(R) Boot Guard, Intel(R) CSME, Intel(R) TXE, Intel(R) SPSIntel CSME(R) versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 3.1.80 and 4.0.30, Intel(R) SPS versions before E5_04.01.04.400, E3_04.01.04.200, SoC-X_04.00.04.200 and SoC-A_04.00.04.300
inteltrusted_execution_technology3.1.80, 4.0.30
intelserver_platform_servicessps_soc-x_04.00.04.200, sps_e3_04.01.04.200, sps_e5_04.01.04.400
intelconverged_security_and_manageability_engine14.0, 11.22.0, 11.12.0

Timeline

References

Open in Interactive Console →