MEDIUM · 6.4

CVE-2020-8670

Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Vulnerability Description

Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS Score

6.4

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
IntelBios-
IntelCore I3-L13G4-
IntelCore I5-L16G7-
IntelCore I7-10510U-
IntelCore I7-10510Y-
IntelCore I7-1060G7-
IntelCore I7-1060Ng7-
IntelCore I7-10610U-
IntelCore I7-1065G7-
IntelCore I7-1068Ng7-
IntelCore I7-10700-
IntelCore I7-10700E-
IntelCore I7-10700F-
IntelCore I7-10700K-
IntelCore I7-10700Kf-
IntelCore I7-10700T-
IntelCore I7-10700Te-
IntelCore I7-10710U-
IntelCore I7-10750H-
IntelCore I7-10810U-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2020-8670?

CVE-2020-8670 is a vulnerability with a CVSS score of 6.4 (MEDIUM). Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

How severe is CVE-2020-8670?

CVE-2020-8670 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-8670?

Check the references section above for vendor advisories and patch information. Affected products include: Intel Bios, Intel Core I3-L13G4, Intel Core I5-L16G7, Intel Core I7-10510U, Intel Core I7-10510Y.