CVE-2020-8704

all versions

Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable esc

6.4MEDIUM

CVE-2020-8703

all versions

Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13

6.7MEDIUM

CVE-2020-8670

all versions

Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privil

6.4MEDIUM

CVE-2020-24507

all versions

Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.1

4.4MEDIUM

CVE-2020-24486

all versions

Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denia

5.5MEDIUM

CVE-2020-12360

all versions

Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation o

7.8HIGH

CVE-2020-12358

all versions

Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of servi

4.4MEDIUM

CVE-2020-12357

all versions

Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation

6.7MEDIUM

CVE-2020-8745

< r1.30.0

Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40,

6.8MEDIUM

CVE-2020-0590

< r1.30.0

Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable esca

7.8HIGH

CVE-2020-0543

< r1.28.0

Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to p

5.5MEDIUM

CVE-2018-3639

< r1.23.0

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all

5.5MEDIUM

CVE-2017-5689

< 11.0.26.3000

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Tec

9.8CRITICAL