CVE Feed

    Dashboard / CVE / CVE-2020-8745

    CVE-2020-8745

    Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

    Published:Nov 12, 2020
    Last Modified:Mar 28, 2025
    EPS:Nov 12, 2020
    EPSS Score:0.00359
    CVSS Score:6.8

    Affected Products

    Vendor
    Intel
    Product
    Converged Security And Manageability Engine
    Vendor
    Intel
    Product
    Trusted Execution Technology
    Vendor
    Siemens
    Product
    Simatic Drive Controller
    Vendor
    Siemens
    Product
    Simatic Drive Controller Firmware
    Vendor
    Siemens
    Product
    Simatic Et200sp 1515sp Pc2
    Vendor
    Siemens
    Product
    Simatic Et200sp 1515sp Pc2 Firmware
    Vendor
    Siemens
    Product
    Simatic Field Pg M5
    Vendor
    Siemens
    Product
    Simatic Field Pg M5 Firmware
    Vendor
    Siemens
    Product
    Simatic Field Pg M6
    Vendor
    Siemens
    Product
    Simatic Field Pg M6 Firmware
    Vendor
    Siemens
    Product
    Simatic Ipc127e
    Vendor
    Siemens
    Product
    Simatic Ipc127e Firmware
    Vendor
    Siemens
    Product
    Simatic Ipc427e
    Vendor
    Siemens
    Product
    Simatic Ipc427e Firmware
    Vendor
    Siemens
    Product
    Simatic Ipc477e
    Vendor
    Siemens
    Product
    Simatic Ipc477e Firmware
    Vendor
    Siemens
    Product
    Simatic Ipc477e Pro
    Vendor
    Siemens
    Product
    Simatic Ipc527g
    Vendor
    Siemens
    Product
    Simatic Ipc527g Firmware
    Vendor
    Siemens
    Product
    Simatic Ipc547g
    Vendor
    Siemens
    Product
    Simatic Ipc547g Firmware
    Vendor
    Siemens
    Product
    Simatic Ipc627e
    Vendor
    Siemens
    Product
    Simatic Ipc627e Firmware
    Vendor
    Siemens
    Product
    Simatic Ipc647e
    Vendor
    Siemens
    Product
    Simatic Ipc647e Firmware
    Vendor
    Siemens
    Product
    Simatic Ipc667e
    Vendor
    Siemens
    Product
    Simatic Ipc667e Firmware
    Vendor
    Siemens
    Product
    Simatic Ipc847e
    Vendor
    Siemens
    Product
    Simatic Ipc847e Firmware
    Vendor
    Siemens
    Product
    Simatic Itp1000
    Vendor
    Siemens
    Product
    Simatic Itp1000 Firmware
    Vendor
    Siemens
    Product
    Sinumerik 828d Hw Pu.4
    Vendor
    Siemens
    Product
    Sinumerik 828d Hw Pu.4 Firmware
    Vendor
    Siemens
    Product
    Sinumerik 840d Sl Ht 10
    Vendor
    Siemens
    Product
    Sinumerik 840d Sl Ht 10 Firmware
    Vendor
    Siemens
    Product
    Sinumerik Mc Mcu 1720
    Vendor
    Siemens
    Product
    Sinumerik Mc Mcu 1720 Firmware
    Vendor
    Siemens
    Product
    Sinumerik One
    Vendor
    Siemens
    Product
    Sinumerik One Firmware
    Vendor
    Siemens
    Product
    Sinumerik One Ncu 1740
    Vendor
    Siemens
    Product
    Sinumerik One Ncu 1740 Firmware
    Vendor
    Siemens
    Product
    Sinumerik One Ppu 1740
    Vendor
    Siemens
    Product
    Sinumerik One Ppu 1740 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-28389 (CVSS 6.7) — Incorrect default permissions in some Intel(R) CSME installer software before version 2328.5.5.0 may allow an …
    CVE-2022-26047 (CVSS 4.3) — Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi …
    CVE-2020-24506 (CVSS 4.4) — Out of bound read in a subsystem in the Intel(R) CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and …
    CVE-2020-8703 (CVSS 6.7) — Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, …
    CVE-2020-24516 (CVSS 6.8) — Modification of assumed-immutable data in subsystem in Intel(R) CSME versions before 13.0.47, 13.30.17, 14.1.5…
    CVE-2020-24507 (CVSS 4.4) — Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.…
    CVE-2020-8761 (CVSS 4.6) — Inadequate encryption strength in subsystem for Intel(R) CSME versions before 13.0.40 and 13.30.10 may allow a…
    CVE-2020-8751 (CVSS 4.6) — Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, Intel(R) TXE vers…
    CVE-2020-8756 (CVSS 6.7) — Improper input validation in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 …
    CVE-2020-12303 (CVSS 7.8) — Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.4…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High