Vulnerability Description
Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Intel | Xeon Bronze 3206R Firmware | - |
| Intel | Xeon Bronze 3206R | - |
| Intel | Xeon Gold 5218R Firmware | - |
| Intel | Xeon Gold 5218R | - |
| Intel | Xeon Gold 5220R Firmware | - |
| Intel | Xeon Gold 5220R | - |
| Intel | Xeon Gold 6208U Firmware | - |
| Intel | Xeon Gold 6208U | - |
| Intel | Xeon Gold 6226R Firmware | - |
| Intel | Xeon Gold 6226R | - |
| Intel | Xeon Gold 6230R Firmware | - |
| Intel | Xeon Gold 6230R | - |
| Intel | Xeon Gold 6238R Firmware | - |
| Intel | Xeon Gold 6238R | - |
| Intel | Xeon Gold 6240R Firmware | - |
| Intel | Xeon Gold 6240R | - |
| Intel | Xeon Gold 6242R Firmware | - |
| Intel | Xeon Gold 6242R | - |
| Intel | Xeon Gold 6246R Firmware | - |
| Intel | Xeon Gold 6246R | - |
Related Weaknesses (CWE)
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdfPatchThird Party Advisory
- https://security.netapp.com/advisory/ntap-20201113-0001/Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdfPatchThird Party Advisory
- https://security.netapp.com/advisory/ntap-20201113-0001/Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358Vendor Advisory
FAQ
What is CVE-2020-0590?
CVE-2020-0590 is a vulnerability with a CVSS score of 7.8 (HIGH). Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
How severe is CVE-2020-0590?
CVE-2020-0590 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-0590?
Check the references section above for vendor advisories and patch information. Affected products include: Intel Xeon Bronze 3206R Firmware, Intel Xeon Bronze 3206R, Intel Xeon Gold 5218R Firmware, Intel Xeon Gold 5218R, Intel Xeon Gold 5220R Firmware.