PT-2020-4360 · Intel · Intel Computing Improvement Program

Eran Shimony · Published 2020-08-11 · Updated 2021-07-21 · CVE-2020-8736

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Intel Computing Improvement Program versions prior to 2.4.5718

Description: The issue is caused by improper access control in the Intel Computing Improvement Program, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is due to errors in privilege management.

Recommendations: For versions prior to 2.4.5718, update to version 2.4.5718 or later to resolve the issue. As a temporary workaround, consider restricting local access to the Intel Computing Improvement Program to minimize the risk of exploitation.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2020-04864

CVE-2020-8736

Affected Products

Intel Computing Improvement Program

References · 4

• https://bdu.fstec.ru/vul/2020-04864 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-8736 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00387.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-8736 · Vendor Advisory