Escalation of Privilege in Intel BIOS Platform Sample Code
CVE-2020-8738

6.7MEDIUM

Key Information:

Vendor

Intel
Status
Intel BiOS Platform Sample Code For Some Intel(r) Processors
Vendor
CVE Published:
12 November 2020

What is CVE-2020-8738?

An improper conditions check in the BIOS platform sample code for select Intel processors could potentially allow a privileged user to escalate their privileges through local access. This vulnerability highlights the importance of securing BIOS configurations and maintaining updated software to protect against unauthorized privilege elevation.

Affected Version(s)

Intel BIOS platform sample code for some Intel(R) Processors See references

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC
https://security.netapp.com/advisory/ntap-20210122-0008/
x_refsource_CONFIRM

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.