CVE-2020-8698

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 12-11-2020 07:15

Last modified: - 26-04-2022 06:33

Total changes: - 6

Description

Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Low

Attack complexity

Local

Attack vector

None

Availability

High

Confidentiality

None

Integrity

Low

Privileges required

Unchanged

Scope

None

User interaction

5.5

Base score

1.8

3.6

Exploitability score

Impact score

Verification logic

AND

vendor=intel AND product=microcode AND version=-

vendor=intel AND product=core_i3-1000g1 AND version=-

vendor=intel AND product=core_i3-1000g4 AND version=-

vendor=intel AND product=core_i3-1005g1 AND version=-

vendor=intel AND product=core_i3-1110g4 AND version=-

vendor=intel AND product=core_i3-1115g4 AND version=-

vendor=intel AND product=core_i3-1120g4 AND version=-

vendor=intel AND product=core_i3-1125g4 AND version=-

vendor=intel AND product=core_i5-1030g4 AND version=-

vendor=intel AND product=core_i5-1030g7 AND version=-

vendor=intel AND product=core_i5-1035g1 AND version=-

vendor=intel AND product=core_i5-1035g4 AND version=-

vendor=intel AND product=core_i5-1035g7 AND version=-

vendor=intel AND product=core_i5-1130g7 AND version=-

vendor=intel AND product=core_i5-1135g7 AND version=-

vendor=intel AND product=core_i7-1060g7 AND version=-

vendor=intel AND product=core_i7-1065g7 AND version=-

vendor=intel AND product=core_i7-1160g7 AND version=-

vendor=intel AND product=core_i7-1165g7 AND version=-

vendor=intel AND product=core_i7-1185g7 AND version=-

vendor=netapp AND product=clustered_data_ontap AND version=-

AND

vendor=netapp AND product=hci_compute_node_bios AND version=-

vendor=netapp AND product=hci_compute_node AND version=-

AND

vendor=netapp AND product=hci_storage_node_bios AND version=-

vendor=netapp AND product=hci_storage_node AND version=-

AND

vendor=netapp AND product=solidfire_bios AND version=-

vendor=netapp AND product=solidfire AND version=-

vendor=fedoraproject AND product=fedora AND version=31

vendor=Debian AND product=debian_linux AND version=9.0

AND

vendor=siemens AND product=simatic_field_pg_m5_firmware AND versionEndExcluding=22.01.08

vendor=siemens AND product=simatic_field_pg_m5 AND version=-

AND

vendor=siemens AND product=simatic_field_pg_m6_firmware

vendor=siemens AND product=simatic_field_pg_m6 AND version=-

AND

vendor=siemens AND product=simatic_ipc427e_firmware AND versionEndExcluding=21.01.15

vendor=siemens AND product=simatic_ipc427e AND version=-

AND

vendor=siemens AND product=simatic_ipc477e_firmware AND versionEndExcluding=21.01.15

vendor=siemens AND product=simatic_ipc477e AND version=-

AND

vendor=siemens AND product=simatic_ipc477e_pro_firmware AND versionEndExcluding=21.01.15

vendor=siemens AND product=simatic_ipc477e_pro AND version=-

AND

vendor=siemens AND product=simatic_ipc627e_firmware AND versionEndExcluding=25.02.08

vendor=siemens AND product=simatic_ipc627e AND version=-

AND

vendor=siemens AND product=simatic_ipc647e_firmware AND versionEndExcluding=25.02.08

vendor=siemens AND product=simatic_ipc647e AND version=-

AND

vendor=siemens AND product=simatic_ipc677e_firmware AND versionEndExcluding=25.02.08

vendor=siemens AND product=simatic_ipc677e AND version=-

AND

vendor=siemens AND product=simatic_ipc847e_firmware AND versionEndExcluding=25.02.08

vendor=siemens AND product=simatic_ipc847e AND version=-

AND

vendor=siemens AND product=simatic_itp1000_firmware AND versionEndExcluding=23.01.08

vendor=siemens AND product=simatic_itp1000 AND version=-

Reference

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381
https://security.netapp.com/advisory/ntap-20201113-0006/
FEDORA-2020-14fda1bf85-Third Party Advisory
[debian-lts-announce] 20210205 [SECURITY] [DLA 2546-1] intel-microcode security update-Mailing List, Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf

Keywords

CVE-2020-8698

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2020-8698

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures