CVE-2020-8744

—

CVSS 3.1

7.8 high

EPSS

<1%p29

Published

Nov 12, 2020 (Nov 12, 2020)

Modified

Jun 17, 2026

Description

Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions before E3_05.01.04.200 may allow a privileged user to potentially enable escalation of privilege via local access.

Vendors: intel siemens
Products: converged security and management engine, server platform services, trusted execution engine, simatic s7-1518-4 pn\/dp mfp firmware, simatic s7-1518f-4 pn\/dp mfp firmware, simatic s7-1500 firmware
Weakness: CWE-665
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.