CVE-2020-12357Medium· 6.7▾ SunlitImproper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 36.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
bioscloud_backupaff_biose-series_biosfas_bioshci_compute_node_bioshci_storage_node_biossolidfire_biossimatic_field_pg_m6_firmwaresimatic_ipc427e_firmwaresimatic_ipc477e_firmwaresimatic_ipc477e_pro_firmwaresimatic_ipc547g_firmwaresimatic_ipc627e_firmwaresimatic_ipc647e_firmwaresimatic_ipc677e_firmwaresimatic_ipc847e_firmwaresimatic_itp1000_firmwaresimatic_cpu_1518-4_firmwareRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2020-24486Medium· 5.5Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.
CVE-2020-8670Medium· 6.4Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2020-8700Medium· 6.7Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2020-12358Medium· 4.4Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.
CVE-2020-12359Medium· 6.8Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVE-2020-12360High· 7.8Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.