CVE-2020-8755 - Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and E3_05.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access

Back Back to CVE browser

MEDIUM

Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and E3_05.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access

Published Nov 12, 2020

6.4

MEDIUM

CVSS 3.1

EPSS 0.28%

Description

Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and E3_05.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Affected products

Vendor n/a Product Intel(R) CSME, Intel(R) SPS Default
unknown
Affected
- Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and E3_05.01.04.200

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Intel(R) CSME, Intel(R) SPS	unknown	Affected Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and E3_05.01.04.200

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-362

Race Condition

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29603
Advisory
https://security.netapp.com/advisory/ntap-20201113-0002/
x_refsource_CONFIRMThird Party Advisory
https://security.netapp.com/advisory/ntap-20201113-0004/
x_refsource_CONFIRMThird Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29603		Advisory
https://security.netapp.com/advisory/ntap-20201113-0002/		x_refsource_CONFIRMThird Party Advisory
https://security.netapp.com/advisory/ntap-20201113-0004/		x_refsource_CONFIRMThird Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner intel

Published Nov 12, 2020

Updated Aug 4, 2024

Reserved Feb 6, 2020

Link CVE-2020-8755

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-8755

Red Hat

No data

ENISA EUVD

Assigner intel

Published Nov 12, 2020

Updated Aug 4, 2024

Link EUVD-2020-29603

GitHub

No data