PT-2020-4895 · Intel · Intel Sps+3
Published
2020-11-10
·
Updated
2020-11-30
·
CVE-2020-8705
CVSS v3.1
6.8
Medium
| Vector | AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Intel(R) CSME versions prior to 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25
Intel(R) TXE versions prior to 3.1.80 and 4.0.30
Intel(R) SPS versions prior to E5 04.01.04.400, E3 04.01.04.200, SoC-X 04.00.04.200 and SoC-A 04.00.04.300
Description:
The issue is related to insecure default initialization of a resource in Intel(R) Boot Guard, which may allow an unauthenticated user to potentially enable escalation of privileges via physical access. This could lead to a situation where an attacker could elevate their privileges.
Recommendations:
For Intel(R) CSME versions prior to 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, update to a version equal to or later than the specified versions to resolve the issue.
For Intel(R) TXE versions prior to 3.1.80 and 4.0.30, update to a version equal to or later than the specified versions to resolve the issue.
For Intel(R) SPS versions prior to E5 04.01.04.400, E3 04.01.04.200, SoC-X 04.00.04.200 and SoC-A 04.00.04.300, update to a version equal to or later than the specified versions to resolve the issue.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Intel Boot Guard
Intel Csme
Intel Sps
Intel Txe