CVE Feed

    Dashboard / CVE / CVE-2020-8672

    CVE-2020-8672

    Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated user to potentially enable elevation of privilege or denial of service via local access.

    Published:Feb 2, 2021
    Last Modified:Nov 21, 2024
    EPS:Feb 2, 2021
    EPSS Score:0.00067
    CVSS Score:7.8

    Affected Products

    Vendor
    Intel
    Product
    Bios
    Vendor
    Intel
    Product
    Celeron 4205u
    Vendor
    Intel
    Product
    Celeron 4305u
    Vendor
    Intel
    Product
    Celeron 4305ue
    Vendor
    Intel
    Product
    Core I3 8100
    Vendor
    Intel
    Product
    Core I3 8100f
    Vendor
    Intel
    Product
    Core I3 8100t
    Vendor
    Intel
    Product
    Core I3 8300
    Vendor
    Intel
    Product
    Core I3 8300t
    Vendor
    Intel
    Product
    Core I3 8350k
    Vendor
    Intel
    Product
    Core I3 9100
    Vendor
    Intel
    Product
    Core I3 9100f
    Vendor
    Intel
    Product
    Core I3 9100t
    Vendor
    Intel
    Product
    Core I3 9300
    Vendor
    Intel
    Product
    Core I3 9300t
    Vendor
    Intel
    Product
    Core I3 9320
    Vendor
    Intel
    Product
    Core I3 9350k
    Vendor
    Intel
    Product
    Core I3 9350kf
    Vendor
    Intel
    Product
    Core I5 8400
    Vendor
    Intel
    Product
    Core I5 8400t
    Vendor
    Intel
    Product
    Core I5 8500
    Vendor
    Intel
    Product
    Core I5 8500t
    Vendor
    Intel
    Product
    Core I5 8600
    Vendor
    Intel
    Product
    Core I5 8600k
    Vendor
    Intel
    Product
    Core I5 8600t
    Vendor
    Intel
    Product
    Core I5 9400
    Vendor
    Intel
    Product
    Core I5 9400f
    Vendor
    Intel
    Product
    Core I5 9400t
    Vendor
    Intel
    Product
    Core I5 9500
    Vendor
    Intel
    Product
    Core I5 9500f
    Vendor
    Intel
    Product
    Core I5 9500t
    Vendor
    Intel
    Product
    Core I5 9600
    Vendor
    Intel
    Product
    Core I5 9600k
    Vendor
    Intel
    Product
    Core I5 9600kf
    Vendor
    Intel
    Product
    Core I5 9600t
    Vendor
    Intel
    Product
    Core I7 8086k
    Vendor
    Intel
    Product
    Core I7 8700
    Vendor
    Intel
    Product
    Core I7 8700k
    Vendor
    Intel
    Product
    Core I7 8700t
    Vendor
    Intel
    Product
    Core I7 9700
    Vendor
    Intel
    Product
    Core I7 9700f
    Vendor
    Intel
    Product
    Core I7 9700k
    Vendor
    Intel
    Product
    Core I7 9700kf
    Vendor
    Intel
    Product
    Core I7 9700t
    Vendor
    Intel
    Product
    Core I9 9900
    Vendor
    Intel
    Product
    Core I9 9900k
    Vendor
    Intel
    Product
    Core I9 9900kf
    Vendor
    Intel
    Product
    Core I9 9900ks
    Vendor
    Intel
    Product
    Core I9 9900t

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2022-36372 (CVSS 7.5) — Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially ena…
    CVE-2023-22449 (CVSS 7.5) — Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable…
    CVE-2023-34086 (CVSS 8.2) — Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable…
    CVE-2021-33117 (CVSS 5.5) — Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, …
    CVE-2020-24486 (CVSS 5.5) — Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to pote…
    CVE-2020-12360 (CVSS 7.8) — Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially…
    CVE-2021-0095 (CVSS 4.4) — Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentiall…
    CVE-2020-12358 (CVSS 4.4) — Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially en…
    CVE-2020-12359 (CVSS 6.8) — Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated…
    CVE-2020-8700 (CVSS 6.7) — Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentia…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High