ZeroHour

CVE-2020-8703

CVSS 3.1
6.7 medium
EPSS
<1%p26
Published
()
Modified
Description

Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a privileged user to potentially enable escalation of privilege via local access.

Vendors
intelnetappsiemens
Products
converged security and manageability engine, cloud backup, simatic field pg m6 firmware, simatic field pg m5 firmware, simatic ipc427e firmware, simatic ipc477e firmware, simatic ipc477e pro firmware, simatic ipc527g firmware, simatic ipc547g firmware, simatic ipc627e firmware, simatic ipc647e firmware, simatic ipc677e firmware
Weakness
CWE-119
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.