PT-2020-3998 · Intel · Intel Core Processor

Published 2020-06-09 · Updated 2020-06-30 · CVE-2020-0529

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Intel Core Processor families versions 8th through 10th Generation

Description: The issue is related to improper initialization in BIOS firmware, which may allow an unauthenticated user to potentially enable escalation of privilege via local access. This is due to incorrect data initialization in the processor's microcode.

Recommendations: For 8th Generation Intel Core Processor family: update the BIOS firmware to a version that properly initializes the microcode. For 9th Generation Intel Core Processor family: update the BIOS firmware to a version that properly initializes the microcode. For 10th Generation Intel Core Processor family: update the BIOS firmware to a version that properly initializes the microcode.

Fix

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

BDU:2020-04392

CVE-2020-0529

Affected Products

Intel Core Processor

References · 5

• https://bdu.fstec.ru/vul/2020-04392 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-0529 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00322.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-0528 · Security Note
• https://t.me/cibsecurity/12791 · Telegram Post