CVE-2020-8695

—

CVSS 3.1

5.5 medium

EPSS

<1%p35

Published

Nov 12, 2020 (Nov 12, 2020)

Modified

Jun 17, 2026

Description

Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

Vendors: intel fedoraproject debian
Products: core i7-8510y firmware, core i7-8500y firmware, core i5-8310y firmware, core i5-8210y firmware, core i5-8200y firmware, core m3-8100y firmware, core i7-7500u firmware, core i7-7510u firmware, core i7-7600u firmware, core i5-7200u firmware, core i5-7210u firmware, core i5-7300u firmware
Weakness: CWE-203
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news2 stories

Week in review: Cybersecurity workforce gap decreases, new issue of (IN)SECURE

Help Net SecurityNov 15, 00:00 UTC · Nov 15, 2020Data breach in the wildCVE-2020-17087 CVE-2020-8694 CVE-2020-8695

New side-channel attacks allow access to sensitive data on Intel CPUs

Help Net SecurityNov 10, 00:00 UTC · Nov 10, 2020Vulnerability CVE-2020-8694 CVE-2020-8695