PT-2020-4895
CVE-2020-8705
·
تاريخ النشر
2020-11-10
·
تاريخ التحديث
2020-11-30
الوصف من
CVSS 3.1
6.8
متوسطةالمقاييسAV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Intel(R) CSME versions prior to 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25
Intel(R) TXE versions prior to 3.1.80 and 4.0.30
Intel(R) SPS versions prior to E5 04.01.04.400, E3 04.01.04.200, SoC-X 04.00.04.200 and SoC-A 04.00.04.300
Description:
The issue is related to insecure default initialization of a resource in Intel(R) Boot Guard, which may allow an unauthenticated user to potentially enable escalation of privileges via physical access. This could lead to a situation where an attacker could elevate their privileges.
Recommendations:
For Intel(R) CSME versions prior to 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, update to a version equal to or later than the specified versions to resolve the issue.
For Intel(R) TXE versions prior to 3.1.80 and 4.0.30, update to a version equal to or later than the specified versions to resolve the issue.
For Intel(R) SPS versions prior to E5 04.01.04.400, E3 04.01.04.200, SoC-X 04.00.04.200 and SoC-A 04.00.04.300, update to a version equal to or later than the specified versions to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾