CVE-2020-0592 : Out of bounds write in BIOS firmware for some Intel(R) Processors may allow an a

Out of bounds write in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access.

Published 2020-11-12 18:15:13

Updated 2020-11-19 14:52:18

Source Intel Corporation

View at NVD, CVE.org

Vulnerability category: Memory CorruptionDenial of service

Products affected by CVE-2020-0592

Intel » Bios » Version: N/A
cpe:2.3:o:intel:bios:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon Bronze 3204 » Version: N/A
When used together with: Intel » Xeon Bronze 3206r » Version: N/A
When used together with: Intel » Xeon Gold 5215 » Version: N/A
When used together with: Intel » Xeon Gold 5215l » Version: N/A
When used together with: Intel » Xeon Gold 5217 » Version: N/A
When used together with: Intel » Xeon Gold 5218 » Version: N/A
When used together with: Intel » Xeon Gold 5218b » Version: N/A
When used together with: Intel » Xeon Gold 5218n » Version: N/A
When used together with: Intel » Xeon Gold 5218r » Version: N/A
When used together with: Intel » Xeon Gold 5218t » Version: N/A
When used together with: Intel » Xeon Gold 5220 » Version: N/A
When used together with: Intel » Xeon Gold 5220r » Version: N/A
When used together with: Intel » Xeon Gold 5220s » Version: N/A
When used together with: Intel » Xeon Gold 5220t » Version: N/A
When used together with: Intel » Xeon Gold 5222 » Version: N/A
When used together with: Intel » Xeon Gold 6208u » Version: N/A
When used together with: Intel » Xeon Gold 6209u » Version: N/A
When used together with: Intel » Xeon Gold 6210u » Version: N/A
When used together with: Intel » Xeon Gold 6212u » Version: N/A
When used together with: Intel » Xeon Gold 6222v » Version: N/A
When used together with: Intel » Xeon Gold 6226 » Version: N/A
When used together with: Intel » Xeon Gold 6226r » Version: N/A
When used together with: Intel » Xeon Gold 6230 » Version: N/A
When used together with: Intel » Xeon Gold 6230n » Version: N/A
When used together with: Intel » Xeon Gold 6230r » Version: N/A
When used together with: Intel » Xeon Gold 6230t » Version: N/A
When used together with: Intel » Xeon Gold 6234 » Version: N/A
When used together with: Intel » Xeon Gold 6238 » Version: N/A
When used together with: Intel » Xeon Gold 6238l » Version: N/A
When used together with: Intel » Xeon Gold 6238r » Version: N/A
When used together with: Intel » Xeon Gold 6238t » Version: N/A
When used together with: Intel » Xeon Gold 6240 » Version: N/A
When used together with: Intel » Xeon Gold 6240l » Version: N/A
When used together with: Intel » Xeon Gold 6240r » Version: N/A
When used together with: Intel » Xeon Gold 6240y » Version: N/A
When used together with: Intel » Xeon Gold 6242 » Version: N/A
When used together with: Intel » Xeon Gold 6242r » Version: N/A
When used together with: Intel » Xeon Gold 6244 » Version: N/A
When used together with: Intel » Xeon Gold 6246 » Version: N/A
When used together with: Intel » Xeon Gold 6246r » Version: N/A
When used together with: Intel » Xeon Gold 6248 » Version: N/A
When used together with: Intel » Xeon Gold 6248r » Version: N/A
When used together with: Intel » Xeon Gold 6250 » Version: N/A
When used together with: Intel » Xeon Gold 6250l » Version: N/A
When used together with: Intel » Xeon Gold 6252 » Version: N/A
When used together with: Intel » Xeon Gold 6252n » Version: N/A
When used together with: Intel » Xeon Gold 6254 » Version: N/A
When used together with: Intel » Xeon Gold 6256 » Version: N/A
When used together with: Intel » Xeon Gold 6258r » Version: N/A
When used together with: Intel » Xeon Gold 6262v » Version: N/A
When used together with: Intel » Xeon Platinum 8253 » Version: N/A
When used together with: Intel » Xeon Platinum 8256 » Version: N/A
When used together with: Intel » Xeon Platinum 8260l » Version: N/A
When used together with: Intel » Xeon Platinum 8260y » Version: N/A
When used together with: Intel » Xeon Platinum 8268 » Version: N/A
When used together with: Intel » Xeon Platinum 8270 » Version: N/A
When used together with: Intel » Xeon Platinum 8276 » Version: N/A
When used together with: Intel » Xeon Platinum 8276l » Version: N/A
When used together with: Intel » Xeon Platinum 8280 » Version: N/A
When used together with: Intel » Xeon Platinum 8280l » Version: N/A
When used together with: Intel » Xeon Platinum 9221 » Version: N/A
When used together with: Intel » Xeon Platinum 9222 » Version: N/A
When used together with: Intel » Xeon Platinum 9242 » Version: N/A
When used together with: Intel » Xeon Platinum 9282 » Version: N/A
When used together with: Intel » Xeon Silver 4208 » Version: N/A
When used together with: Intel » Xeon Silver 4209t » Version: N/A
When used together with: Intel » Xeon Silver 4210 » Version: N/A
When used together with: Intel » Xeon Silver 4210r » Version: N/A
When used together with: Intel » Xeon Silver 4210t » Version: N/A
When used together with: Intel » Xeon Silver 4214 » Version: N/A
When used together with: Intel » Xeon Silver 4214r » Version: N/A
When used together with: Intel » Xeon Silver 4214y » Version: N/A
When used together with: Intel » Xeon Silver 4215 » Version: N/A
When used together with: Intel » Xeon Silver 4215r » Version: N/A
When used together with: Intel » Xeon Silver 4216 » Version: N/A

Max 200 conditions are displayed on this page, to prevent potential performance issues, please refer to NVD for more details.

Exploit prediction scoring system (EPSS) score for CVE-2020-0592

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 10 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-0592

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	0.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2020-0592

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-0592

https://security.netapp.com/advisory/ntap-20201113-0001/

Third Party Advisory

CVEs referencing this url
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358

INTEL-SA-00358
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2020-0592

Products affected by CVE-2020-0592

Exploit prediction scoring system (EPSS) score for CVE-2020-0592

CVSS scores for CVE-2020-0592

CWE ids for CVE-2020-0592

References for CVE-2020-0592