high7.8
CVE-2020-0590
Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local…
Impact
Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Xeon Bronze 3206r Firmware | All versions |
| Intel | Xeon Gold 5218r Firmware | All versions |
| Intel | Xeon Gold 5220r Firmware | All versions |
| Intel | Xeon Gold 6208u Firmware | All versions |
| Intel | Xeon Gold 6226r Firmware | All versions |
| Intel | Xeon Gold 6230r Firmware | All versions |
| Intel | Xeon Gold 6238r Firmware | All versions |
| Intel | Xeon Gold 6240r Firmware | All versions |
| Intel | Xeon Gold 6242r Firmware | All versions |
| Intel | Xeon Gold 6246r Firmware | All versions |
| Intel | Xeon Gold 6248r Firmware | All versions |
| Intel | Xeon Gold 6250 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf
- https://security.netapp.com/advisory/ntap-20201113-0001/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358
- https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf
- https://security.netapp.com/advisory/ntap-20201113-0001/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358