CVE-2020-8703 : Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before

Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a privileged user to potentially enable escalation of privilege via local access.

Published 2021-06-09 19:15:09

Updated 2022-04-22 16:20:35

Source Intel Corporation

View at NVD, CVE.org

Vulnerability category: Overflow

Products affected by CVE-2020-8703

Siemens » Simatic Ipc427e Firmware
cpe:2.3:o:siemens:simatic_ipc427e_firmware:*:*:*:*:*:*:*:*
Matching versions
Siemens » Simatic Ipc477e Firmware
cpe:2.3:o:siemens:simatic_ipc477e_firmware:*:*:*:*:*:*:*:*
Matching versions
Siemens » Simatic Itp1000 Firmware
cpe:2.3:o:siemens:simatic_itp1000_firmware:*:*:*:*:*:*:*:*
Matching versions
Siemens » Simatic Field Pg M5 Firmware
cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:*:*:*:*:*:*:*:*
Matching versions
Siemens » Simatic Ipc477e Pro Firmware
cpe:2.3:o:siemens:simatic_ipc477e_pro_firmware:*:*:*:*:*:*:*:*
Matching versions
Siemens » Simatic Ipc547g Firmware
cpe:2.3:o:siemens:simatic_ipc547g_firmware:*:*:*:*:*:*:*:*
Matching versions
Siemens » Simatic Field Pg M6 Firmware
cpe:2.3:o:siemens:simatic_field_pg_m6_firmware:*:*:*:*:*:*:*:*
Matching versions
Siemens » Simatic Ipc627e Firmware
Versions before (<) 25.02.10
cpe:2.3:o:siemens:simatic_ipc627e_firmware:*:*:*:*:*:*:*:*
Matching versions
Siemens » Simatic Ipc647e Firmware
Versions before (<) 25.02.10
cpe:2.3:o:siemens:simatic_ipc647e_firmware:*:*:*:*:*:*:*:*
Matching versions
Siemens » Simatic Ipc677e Firmware
Versions before (<) 25.02.10
cpe:2.3:o:siemens:simatic_ipc677e_firmware:*:*:*:*:*:*:*:*
Matching versions
Siemens » Simatic Ipc847e Firmware
Versions before (<) 25.02.10
cpe:2.3:o:siemens:simatic_ipc847e_firmware:*:*:*:*:*:*:*:*
Matching versions
Siemens » Simatic Ipc527g Firmware
cpe:2.3:o:siemens:simatic_ipc527g_firmware:*:*:*:*:*:*:*:*
Matching versions
Intel » Converged Security And Manageability Engine
Versions before (<) 13.0.47
cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Core I3-1000g1 » Version: N/A
When used together with: Intel » Core I3-1000g4 » Version: N/A
When used together with: Intel » Core I3-1000ng4 » Version: N/A
When used together with: Intel » Core I3-1005g1 » Version: N/A
When used together with: Intel » Core I3-10100 » Version: N/A
When used together with: Intel » Core I3-10100e » Version: N/A
When used together with: Intel » Core I3-10100f » Version: N/A
When used together with: Intel » Core I3-10100t » Version: N/A
When used together with: Intel » Core I3-10100te » Version: N/A
When used together with: Intel » Core I3-10100y » Version: N/A
When used together with: Intel » Core I3-10105 » Version: N/A
When used together with: Intel » Core I3-10105f » Version: N/A
When used together with: Intel » Core I3-10105t » Version: N/A
When used together with: Intel » Core I3-10110u » Version: N/A
When used together with: Intel » Core I3-10110y » Version: N/A
When used together with: Intel » Core I3-10300 » Version: N/A
When used together with: Intel » Core I3-10300t » Version: N/A
When used together with: Intel » Core I3-10305 » Version: N/A
When used together with: Intel » Core I3-10305t » Version: N/A
When used together with: Intel » Core I3-10320 » Version: N/A
When used together with: Intel » Core I3-10325 » Version: N/A
When used together with: Intel » Core I5-10200h » Version: N/A
When used together with: Intel » Core I5-10210u » Version: N/A
When used together with: Intel » Core I5-10210y » Version: N/A
When used together with: Intel » Core I5-10300h » Version: N/A
When used together with: Intel » Core I5-1030g4 » Version: N/A
When used together with: Intel » Core I5-1030g7 » Version: N/A
When used together with: Intel » Core I5-1030ng7 » Version: N/A
When used together with: Intel » Core I5-10310u » Version: N/A
When used together with: Intel » Core I5-10310y » Version: N/A
When used together with: Intel » Core I5-1035g1 » Version: N/A
When used together with: Intel » Core I5-1035g4 » Version: N/A
When used together with: Intel » Core I5-1035g7 » Version: N/A
When used together with: Intel » Core I5-1038ng7 » Version: N/A
When used together with: Intel » Core I5-10400 » Version: N/A
When used together with: Intel » Core I5-10400f » Version: N/A
When used together with: Intel » Core I5-10400h » Version: N/A
When used together with: Intel » Core I5-10400t » Version: N/A
When used together with: Intel » Core I5-10500 » Version: N/A
When used together with: Intel » Core I5-10500e » Version: N/A
When used together with: Intel » Core I5-10500h » Version: N/A
When used together with: Intel » Core I5-10500t » Version: N/A
When used together with: Intel » Core I5-10500te » Version: N/A
When used together with: Intel » Core I5-10505 » Version: N/A
When used together with: Intel » Core I5-10600 » Version: N/A
When used together with: Intel » Core I5-10600k » Version: N/A
When used together with: Intel » Core I5-10600kf » Version: N/A
When used together with: Intel » Core I5-10600t » Version: N/A
When used together with: Intel » Core I7-10510u » Version: N/A
When used together with: Intel » Core I7-10510y » Version: N/A
When used together with: Intel » Core I7-1060g7 » Version: N/A
When used together with: Intel » Core I7-1060ng7 » Version: N/A
When used together with: Intel » Core I7-10610u » Version: N/A
When used together with: Intel » Core I7-1065g7 » Version: N/A
When used together with: Intel » Core I7-1068ng7 » Version: N/A
When used together with: Intel » Core I7-10700 » Version: N/A
When used together with: Intel » Core I7-10700e » Version: N/A
When used together with: Intel » Core I7-10700f » Version: N/A
When used together with: Intel » Core I7-10700k » Version: N/A
When used together with: Intel » Core I7-10700kf » Version: N/A
When used together with: Intel » Core I7-10700t » Version: N/A
When used together with: Intel » Core I7-10700te » Version: N/A
When used together with: Intel » Core I7-10710u » Version: N/A
When used together with: Intel » Core I7-10750h » Version: N/A
When used together with: Intel » Core I7-10810u » Version: N/A
When used together with: Intel » Core I7-10850h » Version: N/A
When used together with: Intel » Core I7-10870h » Version: N/A
When used together with: Intel » Core I7-10875h » Version: N/A
When used together with: Intel » Core I9-10850k » Version: N/A
When used together with: Intel » Core I9-10885h » Version: N/A
When used together with: Intel » Core I9-10900 » Version: N/A
When used together with: Intel » Core I9-10900e » Version: N/A
When used together with: Intel » Core I9-10900f » Version: N/A
When used together with: Intel » Core I9-10900k » Version: N/A
When used together with: Intel » Core I9-10900kf » Version: N/A
When used together with: Intel » Core I9-10900t » Version: N/A
When used together with: Intel » Core I9-10900te » Version: N/A
When used together with: Intel » Core I9-10910 » Version: N/A
When used together with: Intel » Core I9-10980hk » Version: N/A
Intel » Converged Security And Manageability Engine
Versions before (<) 15.0.22
cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:*
Matching versions
Intel » Converged Security And Manageability Engine
Versions before (<) 14.5.32
cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:*
Matching versions
Intel » Converged Security And Manageability Engine
Versions before (<) 11.22.86
cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:*
Matching versions
Intel » Converged Security And Manageability Engine
Versions before (<) 12.0.81
cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » B360 » Version: N/A
When used together with: Intel » B365 » Version: N/A
When used together with: Intel » C242 » Version: N/A
When used together with: Intel » C246 » Version: N/A
When used together with: Intel » Celeron 4205u » Version: N/A
When used together with: Intel » Celeron 4305u » Version: N/A
When used together with: Intel » Celeron 4305ue » Version: N/A
When used together with: Intel » Core I3-8100 » Version: N/A
When used together with: Intel » Core I3-8100b » Version: N/A
When used together with: Intel » Core I3-8100h » Version: N/A
When used together with: Intel » Core I3-8100t » Version: N/A
When used together with: Intel » Core I3-8109u » Version: N/A
When used together with: Intel » Core I3-8121u » Version: N/A
When used together with: Intel » Core I3-8130u » Version: N/A
When used together with: Intel » Core I3-8140u » Version: N/A
When used together with: Intel » Core I3-8145u » Version: N/A
When used together with: Intel » Core I3-8145ue » Version: N/A
When used together with: Intel » Core I3-8300 » Version: N/A
When used together with: Intel » Core I3-8300t » Version: N/A
When used together with: Intel » Core I3-8350k » Version: N/A
When used together with: Intel » Core I5-8200y » Version: N/A
When used together with: Intel » Core I5-8210y » Version: N/A
When used together with: Intel » Core I5-8250u » Version: N/A
When used together with: Intel » Core I5-8257u » Version: N/A
When used together with: Intel » Core I5-8259u » Version: N/A
When used together with: Intel » Core I5-8260u » Version: N/A
When used together with: Intel » Core I5-8265u » Version: N/A
When used together with: Intel » Core I5-8269u » Version: N/A
When used together with: Intel » Core I5-8279u » Version: N/A
When used together with: Intel » Core I5-8300h » Version: N/A
When used together with: Intel » Core I5-8305g » Version: N/A
When used together with: Intel » Core I5-8310y » Version: N/A
When used together with: Intel » Core I5-8350u » Version: N/A
When used together with: Intel » Core I5-8365u » Version: N/A
When used together with: Intel » Core I5-8365ue » Version: N/A
When used together with: Intel » Core I5-8400 » Version: N/A
When used together with: Intel » Core I5-8400b » Version: N/A
When used together with: Intel » Core I5-8400h » Version: N/A
When used together with: Intel » Core I5-8400t » Version: N/A
When used together with: Intel » Core I5-8500 » Version: N/A
When used together with: Intel » Core I5-8500b » Version: N/A
When used together with: Intel » Core I5-8500t » Version: N/A
When used together with: Intel » Core I5-8600 » Version: N/A
When used together with: Intel » Core I5-8600k » Version: N/A
When used together with: Intel » Core I5-8600t » Version: N/A
When used together with: Intel » Core I7-8086k » Version: N/A
When used together with: Intel » Core I7-8500y » Version: N/A
When used together with: Intel » Core I7-8550u » Version: N/A
When used together with: Intel » Core I7-8557u » Version: N/A
When used together with: Intel » Core I7-8559u » Version: N/A
When used together with: Intel » Core I7-8565u » Version: N/A
When used together with: Intel » Core I7-8569u » Version: N/A
When used together with: Intel » Core I7-8650u » Version: N/A
When used together with: Intel » Core I7-8665u » Version: N/A
When used together with: Intel » Core I7-8665ue » Version: N/A
When used together with: Intel » Core I7-8700 » Version: N/A
When used together with: Intel » Core I7-8700b » Version: N/A
When used together with: Intel » Core I7-8700k » Version: N/A
When used together with: Intel » Core I7-8700t » Version: N/A
When used together with: Intel » Core I7-8705g » Version: N/A
When used together with: Intel » Core I7-8706g » Version: N/A
When used together with: Intel » Core I7-8709g » Version: N/A
When used together with: Intel » Core I7-8750h » Version: N/A
When used together with: Intel » Core I7-8809g » Version: N/A
When used together with: Intel » Core I7-8850h » Version: N/A
When used together with: Intel » Core I9-8950hk » Version: N/A
When used together with: Intel » H310 » Version: N/A
When used together with: Intel » H370 » Version: N/A
When used together with: Intel » Mobile Cm246 » Version: N/A
When used together with: Intel » Pentium Gold 4410y » Version: N/A
When used together with: Intel » Pentium Gold 4415u » Version: N/A
When used together with: Intel » Pentium Gold 4415y » Version: N/A
When used together with: Intel » Pentium Gold 4417u » Version: N/A
When used together with: Intel » Pentium Gold 4425y » Version: N/A
When used together with: Intel » Pentium Gold 5405u » Version: N/A
When used together with: Intel » Pentium Gold 6405u » Version: N/A
When used together with: Intel » Pentium Gold 6500y » Version: N/A
When used together with: Intel » Pentium Gold 7505 » Version: N/A
When used together with: Intel » Pentium Gold G5400 » Version: N/A
When used together with: Intel » Pentium Gold G5400t » Version: N/A
When used together with: Intel » Pentium Gold G5420 » Version: N/A
When used together with: Intel » Pentium Gold G5420t » Version: N/A
When used together with: Intel » Pentium Gold G5500 » Version: N/A
When used together with: Intel » Pentium Gold G5500t » Version: N/A
When used together with: Intel » Pentium Gold G5600 » Version: N/A
When used together with: Intel » Pentium Gold G5600t » Version: N/A
When used together with: Intel » Pentium Gold G5620 » Version: N/A
When used together with: Intel » Pentium Gold G6400 » Version: N/A
When used together with: Intel » Pentium Gold G6400e » Version: N/A
When used together with: Intel » Pentium Gold G6400t » Version: N/A
When used together with: Intel » Pentium Gold G6400te » Version: N/A
When used together with: Intel » Pentium Gold G6405 » Version: N/A
When used together with: Intel » Pentium Gold G6405t » Version: N/A
When used together with: Intel » Pentium Gold G6500 » Version: N/A
When used together with: Intel » Pentium Gold G6500t » Version: N/A
When used together with: Intel » Pentium Gold G6505 » Version: N/A
When used together with: Intel » Pentium Gold G6505t » Version: N/A
When used together with: Intel » Pentium Gold G6600 » Version: N/A
When used together with: Intel » Pentium Gold G6605 » Version: N/A
When used together with: Intel » Q370 » Version: N/A
When used together with: Intel » Xeon W-10855m » Version: N/A
When used together with: Intel » Xeon W-10885m » Version: N/A
When used together with: Intel » Xeon W-11855m » Version: N/A
When used together with: Intel » Xeon W-11955m » Version: N/A
When used together with: Intel » Xeon W-1250 » Version: N/A
When used together with: Intel » Xeon W-1250e » Version: N/A
When used together with: Intel » Xeon W-1250p » Version: N/A
When used together with: Intel » Xeon W-1250te » Version: N/A
When used together with: Intel » Xeon W-1270 » Version: N/A
When used together with: Intel » Xeon W-1270e » Version: N/A
When used together with: Intel » Xeon W-1270p » Version: N/A
When used together with: Intel » Xeon W-1270te » Version: N/A
When used together with: Intel » Xeon W-1290 » Version: N/A
When used together with: Intel » Xeon W-1290e » Version: N/A
When used together with: Intel » Xeon W-1290p » Version: N/A
When used together with: Intel » Xeon W-1290t » Version: N/A
When used together with: Intel » Xeon W-1290te » Version: N/A
When used together with: Intel » Z370 » Version: N/A
When used together with: Intel » Z390 » Version: N/A
Intel » Converged Security And Manageability Engine
Versions before (<) 14.1.53
cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:*
Matching versions
Intel » Converged Security And Manageability Engine
Versions before (<) 11.12.86
cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:*
Matching versions
Intel » Converged Security And Manageability Engine
Versions before (<) 11.8.86
cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:*
Matching versions
Intel » Converged Security And Manageability Engine
Versions before (<) 13.30.17
cpe:2.3:a:intel:converged_security_and_manageability_engine:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Core I3 L13g4 » Version: N/A
When used together with: Intel » Core I5 L16g7 » Version: N/A
Netapp » Cloud Backup » Version: N/A
cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
Matching versions

Max 200 conditions are displayed on this page, to prevent potential performance issues, please refer to NVD for more details.

Exploit prediction scoring system (EPSS) score for CVE-2020-8703

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 10 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-8703

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	0.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2020-8703

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-8703

https://security.netapp.com/advisory/ntap-20210611-0004/

Intel SA-00459 CSME Vulnerabilities in NetApp Products | NetApp Product Security
Third Party Advisory

CVEs referencing this url
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00459.html

INTEL-SA-00459
Vendor Advisory

CVEs referencing this url
https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf

Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2020-8703

Products affected by CVE-2020-8703

Exploit prediction scoring system (EPSS) score for CVE-2020-8703

CVSS scores for CVE-2020-8703

CWE ids for CVE-2020-8703

References for CVE-2020-8703