PT-2020-4287 · Intel · Intel Bios+2

Published 2020-09-08 · Updated 2021-07-21 · CVE-2020-8671

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Intel BIOS firmware versions for 8th and 9th Generation Intel Core Processors and Intel Celeron Processor 4000 Series

Description: The issue is related to insufficient control flow management and errors in privilege management in the BIOS firmware, which may allow an authenticated user to potentially enable information disclosure via local access. This could permit an attacker to gain unauthorized access to protected information.

Recommendations: For Intel BIOS firmware versions for 8th and 9th Generation Intel Core Processors and Intel Celeron Processor 4000 Series, update the BIOS firmware to a version that includes the necessary security patches to address the insufficient control flow management issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2020-04780

CVE-2020-8671

Affected Products

Intel Bios

Intel Celeron Processor 4000 Series

Intel Core Processor

References · 4

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8671 · Security Note
• https://bdu.fstec.ru/vul/2020-04780 · Security Note
• https://cybersecurity-help.cz/vdb/SB2020091001 · Note