CVE Feed

    Dashboard / CVE / CVE-2020-0588

    CVE-2020-0588

    Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

    Published:Nov 12, 2020
    Last Modified:Nov 21, 2024
    EPS:Nov 12, 2020
    EPSS Score:0.0015
    CVSS Score:6.7

    Affected Products

    Vendor
    Intel
    Product
    Bios
    Vendor
    Intel
    Product
    Xeon Bronze 3204
    Vendor
    Intel
    Product
    Xeon Bronze 3206r
    Vendor
    Intel
    Product
    Xeon Gold 5215
    Vendor
    Intel
    Product
    Xeon Gold 5215l
    Vendor
    Intel
    Product
    Xeon Gold 5217
    Vendor
    Intel
    Product
    Xeon Gold 5218
    Vendor
    Intel
    Product
    Xeon Gold 5218b
    Vendor
    Intel
    Product
    Xeon Gold 5218n
    Vendor
    Intel
    Product
    Xeon Gold 5218r
    Vendor
    Intel
    Product
    Xeon Gold 5218t
    Vendor
    Intel
    Product
    Xeon Gold 5220
    Vendor
    Intel
    Product
    Xeon Gold 5220r
    Vendor
    Intel
    Product
    Xeon Gold 5220s
    Vendor
    Intel
    Product
    Xeon Gold 5220t
    Vendor
    Intel
    Product
    Xeon Gold 5222
    Vendor
    Intel
    Product
    Xeon Gold 6208u
    Vendor
    Intel
    Product
    Xeon Gold 6209u
    Vendor
    Intel
    Product
    Xeon Gold 6210u
    Vendor
    Intel
    Product
    Xeon Gold 6212u
    Vendor
    Intel
    Product
    Xeon Gold 6222v
    Vendor
    Intel
    Product
    Xeon Gold 6226
    Vendor
    Intel
    Product
    Xeon Gold 6226r
    Vendor
    Intel
    Product
    Xeon Gold 6230
    Vendor
    Intel
    Product
    Xeon Gold 6230n
    Vendor
    Intel
    Product
    Xeon Gold 6230r
    Vendor
    Intel
    Product
    Xeon Gold 6230t
    Vendor
    Intel
    Product
    Xeon Gold 6234
    Vendor
    Intel
    Product
    Xeon Gold 6238
    Vendor
    Intel
    Product
    Xeon Gold 6238l
    Vendor
    Intel
    Product
    Xeon Gold 6238r
    Vendor
    Intel
    Product
    Xeon Gold 6238t
    Vendor
    Intel
    Product
    Xeon Gold 6240
    Vendor
    Intel
    Product
    Xeon Gold 6240l
    Vendor
    Intel
    Product
    Xeon Gold 6240r
    Vendor
    Intel
    Product
    Xeon Gold 6240y
    Vendor
    Intel
    Product
    Xeon Gold 6242
    Vendor
    Intel
    Product
    Xeon Gold 6242r
    Vendor
    Intel
    Product
    Xeon Gold 6244
    Vendor
    Intel
    Product
    Xeon Gold 6246
    Vendor
    Intel
    Product
    Xeon Gold 6246r
    Vendor
    Intel
    Product
    Xeon Gold 6248
    Vendor
    Intel
    Product
    Xeon Gold 6248r
    Vendor
    Intel
    Product
    Xeon Gold 6250
    Vendor
    Intel
    Product
    Xeon Gold 6250l
    Vendor
    Intel
    Product
    Xeon Gold 6252
    Vendor
    Intel
    Product
    Xeon Gold 6252n
    Vendor
    Intel
    Product
    Xeon Gold 6254
    Vendor
    Intel
    Product
    Xeon Gold 6256
    Vendor
    Intel
    Product
    Xeon Gold 6258r
    Vendor
    Intel
    Product
    Xeon Gold 6262v
    Vendor
    Intel
    Product
    Xeon Platinum 8253
    Vendor
    Intel
    Product
    Xeon Platinum 8256
    Vendor
    Intel
    Product
    Xeon Platinum 8260l
    Vendor
    Intel
    Product
    Xeon Platinum 8260y
    Vendor
    Intel
    Product
    Xeon Platinum 8268
    Vendor
    Intel
    Product
    Xeon Platinum 8270
    Vendor
    Intel
    Product
    Xeon Platinum 8276
    Vendor
    Intel
    Product
    Xeon Platinum 8276l
    Vendor
    Intel
    Product
    Xeon Platinum 8280
    Vendor
    Intel
    Product
    Xeon Platinum 8280l
    Vendor
    Intel
    Product
    Xeon Platinum 9221
    Vendor
    Intel
    Product
    Xeon Platinum 9222
    Vendor
    Intel
    Product
    Xeon Platinum 9242
    Vendor
    Intel
    Product
    Xeon Platinum 9282
    Vendor
    Intel
    Product
    Xeon Silver 4208
    Vendor
    Intel
    Product
    Xeon Silver 4209t
    Vendor
    Intel
    Product
    Xeon Silver 4210
    Vendor
    Intel
    Product
    Xeon Silver 4210r
    Vendor
    Intel
    Product
    Xeon Silver 4210t
    Vendor
    Intel
    Product
    Xeon Silver 4214
    Vendor
    Intel
    Product
    Xeon Silver 4214r
    Vendor
    Intel
    Product
    Xeon Silver 4214y
    Vendor
    Intel
    Product
    Xeon Silver 4215
    Vendor
    Intel
    Product
    Xeon Silver 4215r
    Vendor
    Intel
    Product
    Xeon Silver 4216

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2022-36372 (CVSS 7.5) — Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially ena…
    CVE-2023-22449 (CVSS 7.5) — Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable…
    CVE-2023-34086 (CVSS 8.2) — Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable…
    CVE-2021-33117 (CVSS 5.5) — Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, …
    CVE-2020-24486 (CVSS 5.5) — Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to pote…
    CVE-2020-12360 (CVSS 7.8) — Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially…
    CVE-2021-0095 (CVSS 4.4) — Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentiall…
    CVE-2020-12358 (CVSS 4.4) — Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially en…
    CVE-2020-12359 (CVSS 6.8) — Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated…
    CVE-2020-8700 (CVSS 6.7) — Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentia…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High