MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2020-8745

CVSS 6.8v3.1pub. 2020-11-12upd. 2025-03-28

Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

CVSS Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Intel Converged Security And Manageability Engine

    APP
    Intel
    < 11.8.8011.12.0 – 11.12.80 (excl.)11.22.0 – 11.22.80 (excl.)12.0 – 12.0.70 (excl.)14.0 – 14.0.45 (excl.)14.5.0 – 14.5.25 (excl.)

  • Intel Trusted Execution Technology

    APP
    Intel
    < 3.1.804.0 – 4.0.30 (excl.)

  • Siemens Simatic Drive Controller

    HW
    Siemens
    all versions

  • Siemens Simatic Drive Controller Firmware

    OS
    Siemens
    < 05.00.01.00

  • Siemens Simatic Et200sp 1515sp Pc2

    HW
    Siemens
    all versions

  • Siemens Simatic Et200sp 1515sp Pc2 Firmware

    OS
    Siemens
    < 0209.0105

  • Siemens Simatic Field Pg M5

    HW
    Siemens
    all versions

  • Siemens Simatic Field Pg M5 Firmware

    OS
    Siemens
    < 22.01.08

  • Siemens Simatic Field Pg M6

    HW
    Siemens
    all versions

  • Siemens Simatic Field Pg M6 Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc127e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc127e Firmware

    OS
    Siemens
    < 27.01.05

  • Siemens Simatic Ipc427e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc427e Firmware

    OS
    Siemens
    < 27.01.05

  • Siemens Simatic Ipc477e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc477e Firmware

    OS
    Siemens
    < 21.01.15

  • Siemens Simatic Ipc477e Pro

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc527g

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc527g Firmware

    OS
    Siemens
    < 1.4.0

  • Siemens Simatic Ipc547g

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc547g Firmware

    OS
    Siemens
    < r1.30.0

  • Siemens Simatic Ipc627e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc627e Firmware

    OS
    Siemens
    < 25.02.08

  • Siemens Simatic Ipc647e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc647e Firmware

    OS
    Siemens
    < 25.02.08

  • Siemens Simatic Ipc667e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc667e Firmware

    OS
    Siemens
    < 25.02.08

  • Siemens Simatic Ipc847e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc847e Firmware

    OS
    Siemens
    < 25.02.08

  • Siemens Simatic Itp1000

    HW
    Siemens
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2017-5689CRITICAL9.8⚠ KEVPL ✓same product

Privilege Escalation w Intel AMT/ISM/SBT — nieautoryzowany dostęp systemowy

CVE-2023-51438CRITICAL10.0PL ✓same product

Nieautoryzowany dostęp w maxView Storage Manager via Redfish Server

CVE-2022-24408HIGH7.8same product

A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < ...

CVE-2021-33625HIGH7.5same product

An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword. Software SMI services that u...

CVE-2020-5953HIGH7.5same product

A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located ...