PT-2020-3948 · Intel · Intel Core Processor
Published
2020-09-08
·
Updated
2020-09-22
·
CVE-2020-24457
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Intel Core Processors versions 8th through 10th Generation
Description:
A logic error in the BIOS firmware may allow an unauthenticated user to potentially enable escalation of privilege, denial of service, and/or information disclosure via physical access. The issue is related to a logical error in the BIOS microprogram, which could be exploited by an attacker to elevate privileges, cause a denial of service, or impact the confidentiality of protected information.
Recommendations:
For 8th Generation Intel Core Processors, update the BIOS firmware to a version that addresses the logic error.
For 9th Generation Intel Core Processors, update the BIOS firmware to a version that addresses the logic error.
For 10th Generation Intel Core Processors, update the BIOS firmware to a version that addresses the logic error.
As a temporary workaround, consider restricting physical access to the systems until a patch is available.
Fix
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Intel Core Processor