CVE-2020-8672 - Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated user to potentially enable elevation of privilege or denial of service via local access

Back Back to CVE browser

HIGH

Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated user to potentially enable elevation of privilege or denial of service via local access

Published Feb 2, 2021

7.8

HIGH

CVSS 3.1

EPSS 0.34%

Description

Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated user to potentially enable elevation of privilege or denial of service via local access.

Affected products

Vendor n/a Product Intel BIOS Advisory Default
n/a
- Version
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Intel BIOS Advisory

n/a

Version	Status	Constraints
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29520
Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29520		Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html		x_refsource_CONFIRMVendor Advisory